Cortex Cloud Features

Access pre-built and custom reports and dashboards.

Creates new or streamlines existing workflows to better handle IT support tickets and service.

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks

Allows users to create, edit, and relinquish user access privileges.

Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.

Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.

Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.

Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Provides risk scoring for suspicious activity, vulnerabilities, and other threats.

Provides tools for managing authentication credentials such as keys and passwords.

Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.

Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Collect and maintain structured information that describes data or content

Create, manage, and track policies and procedures within an organization

Manage and track all disruptions and incidents

Detect (and block) vulnerabilities and threats in your applications based on vulnerability information

Track and manage adherence to policies for any service, product, process, or supplier

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Manage the processes involved when making the application ready for use

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Install software updates and bug fixes remotely

Identify and respond to security threats to developed applications

Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads.

Allows administrators to set policies for security and data governance.

Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.

Creates new or streamlines existing workflows to better handle IT support tickets and service.

Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats.

Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.

Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.

Conduct tracking and assessment of application and device behavior without breaks or interruptions

Active monitoring of systems, applications, or networks

Scans application and image source code for security flaws without executing it in a live environment

Monitors container activities and detects threats across containers, networks, and cloud service providers.

Protects compute resources across a networks and cloud service providers. Serves as Firewall and prompts additional authentication for suspicious users.

Allows administrative control over network components, mapping, and segmentation.

Scans pods/images deployed to production for vulnerabilities or compliance issues

Discover patch statuses and vulnerabilities

Monitors data quality and sends alerts based on violations or misuse.

Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.

Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.

Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Allows users to create, edit, and relinquish user access privileges.

Ensures user access management, data lineage, and data encryption.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Supports a useful and wide variety of programming languages.

Integrates seamlessly with the build environment and development tools like repositories, package managers, etc.

Grants comprehensive user-friendly insight into all open source components.

Provides relevant and helpful suggestions for vulnerability remediation upon detection.

Monitors open source components proactively and continuously.

Comprehensively identifies all open source version updates, vulnerabilities, and compliance issues.

Identifies and scores potential network security risks, vulnerabilities, and compliance impacts of attacks and breaches.

Creates reports outlining log activity and relevant metrics.

Allows for vulnerability ranking by customized risk and threat priorities.

Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised.

Stores information related to common vulnerabilities and how to resolve them once incidents occur.

Identify risk data attributes such as description, category, owner, or hierarchy.

Provides the ability to create custom reporting dashboards to further explore vulnerability and risk data.

Reduces time spent remedying issues manually. Resolves common network security incidents quickly.

Streamlines the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.

Allows users to perfrom hands-on live simulations and penetration tests.

Runs pre-scripted vulnerability scans and security tests without requiring manual work.

Offers data loss prevention tools to protect data from leaving the environments it is allowed to.

Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Allows users to track and control security policies across cloud services and providers.

Provides a risk-based approach to determining trust within the network.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.

Detect new assets as they enter a cloud environments and networks to add to asset inventory.

Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.

Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.

Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.

Allows for vulnerability ranking by customized risk and threat priorities.

Helps define policies for access management

Uses principle of least privilege to ensure access control at granular level of specific resources and apps

Enables organization to define roles and assign access based on these roles

Streamlines the management of user access through AI

Tracks and logs user activities, access requests, and changes to entitlements

Detects and remediates risky, misconfigured permissions for human and machine identities using AI

Provides visibility into all users and identities across the system

Provides reporting capabilities to demonstrate compliance

Generates reports to demonstrate AI compliance with local and international frameworks.

Helps AI systems to comply with the regulations.

Maintains detailed logs of activities and changes to AI models.

Evaluates legal, operational and ethical risks posed by AI systems.

Monitors AI models for anomalies continuously.

Automates retraining, version updates and decomissioning when the models are outdated.

Restricts access to AI models and sensitive data to authorized users.

Helps sharing AI models and best practices.

Scans containers, workloads, and kubernetes clusters for any misconfigurations or vulnerabilities.

Monitor live environments for anomalies, risks and threats to ensure rapid response.

Integrates with CI/CD pipelines to detect security risks early in the development life cycle.

Consolidate all security data across the tech and cloud stacks into one dashboard.

Offers an AI-powered engine to provide remediation guidance to the user based on the type of threat.

Uses context-aware analysis to identify critical and non-critical risks across vulnerabilities.

Help detect anomalies across cloud workloads which could help present a potential breach.

Offers a unified view of all cloud assets across multi-cloud platforms such as AWS, Azure, GCP etc.

Continuously scans cloud environments for any misconfigurations, and provide benchmarks and guided remediation.

Capability to perform complex tasks without constant human input

Improves performance based on feedback and experience

Capability to perform complex tasks without constant human input

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Offers managed detection and response services.

Provide real‑time visibility into data exposures and activities.

Automatically scan across cloud, SaaS, on‑prem environments to locate and tag sensitive data.

Allow business‑specific or regulatory data labels beyond default frameworks.

Identify over‑permissioned users, roles, or accounts in combination with misconfigurations.

Assess data risks against regulatory frameworks and internal policies.

Prioritize findings based on data sensitivity, exploitability, and business impact.

Provide context‑aware recommendations for fixing exposures (e.g., revoke access, encrypt, misconfiguration remediation).

Integrate with CSPM, CIEM, SOAR, SIEM for automated policy enforcement.

Monitor posture over time and track remediation efforts.

Integrate with existing security infrastructure (SIEM, CASB, IAM, DSPM/CSPM/SSPM) to bring AI‑SPM into the wider security ecosystem.

Discover AI applications, agents, chatbots and integrations across SaaS, APIs and other environments.

Support continuous updates to policies and controls as AI‑tool usage evolves and new threats emerge.

Monitor data flows, permissions and resource access associated with AI integrations and tools.

Enforce AI‑specific security policies in real time, such as limiting agent permissions and blocking unauthorized AI activity.

Continuously assess AI integration risks including misconfigurations, policy violations and exposure to external AI services.

Provide dashboards, risk scores and prioritisation for remediation across the AI‑asset estate.

Monitor AI‑generated content for sensitive/regulated information and apply remediation or blocking controls.

Maintain audit logs, governance controls and reporting tied specifically to AI assets, agent behaviours and integrations.

Extra layer of security that requires not only a password and username but also something specific to that user

Set up connections to third-party platforms to improve business processes

Identify and alert about security breaches by third parties

A process to automatically integrate code changes from multiple contributors into a shared repository

Alter the layout and content of reports

Process of building and deploying software from the build to the production environment

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Uncovers vulnerabilities of the system and determines whether system data and resources are protected from possible intruders

A record of all activities within the system, including user access, changes made, etc.

Notifying as a warning or reminder of a potential or imminent hazard

Define levels of authorization for access to specific files or systems

Application programming interface that allows for integration with other systems/databases

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

A process to automatically release code changes from repository to production environment

Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Verify the identity of users/devices to enable secure access

Convert data into a code for security

Information to prevent, understand and identify cyber threats

Analyze potential risks across the organization

For development, security, and operations teams

Use AI to generate content in the form of text, images, videos, etc.

View and track pertinent metrics to find patterns and gain insights from data

Isolating applications from their host and from each other to protect against vulnerabilities

Initiate collection and analysis of known risks

Search and filter data across systems to locate required information by entering keywords or certain criteria

Classify levels of threat and organize actions based on priorities

Software program that continuously adjusts its behavior based on observed data

Tools that provide relevant information at specific times to support judgments and courses of action

Provides a channel for team members to share AI models, media files, communicate, and work together

Define levels of authorization for access to specific files or systems

Create, manage and track all task activities and progression

Active monitoring of systems, applications, or networks

Process and analyze human language in text or audio form

Automatically map and compare AI governance policies with actual development and deployment practices

Identify and prioritize AI risks using advanced algorithms, prevent critical vulnerabilities, and mitigate risks when required

Measure AI systems' ethical alignment to ensure compliance, fairness, transparency, and security

A record of all activities within the system, including user access, changes made, etc.

Embed/link applications into third party software so it can be accessed within a third party system

Manage and track all stages of a product lifecycle, from its conception, design, development, and deployment

Anticipates needs and offers suggestions without prompting