Home »  Editorial Desk »  palo-alto-networks-unveils-cortex-agentix-to-build-deploy-and-govern-the-agentic-workforce-of-the-future

Palo Alto Networks Unveils Cortex AgentiX to Build, Deploy and Govern the Agentic Workforce of the Future

Enhanced platform combines the power of agentic AI with the safety of enterprise-grade guardrails

SANTA CLARA, Calif., October 2025 — As enterprises race to adopt agentic AI for productivity gains, they are challenged with complex ecosystem integrations and a lack of control. Today, Palo Alto Networks (NASDAQ: PANW), the global cybersecurity leader, is launching Cortex® AgentiX™ to solve this problem. As the next generation of Cortex XSOAR®, AgentiX is the industry's most secure platform to build, deploy and govern the AI agent workforce of the future. 

Starting with the SOC, AgentiX is revolutionizing automation to counter adversaries who can launch attacks up to 100 times faster with AI. Its powerful prebuilt agents are able to dynamically plan, reason and execute solutions just as an expert would, giving security analysts a decisive advantage. Ultimately, AgentiX delivers up to a 98% reduction in MTTR with 75% less manual work, freeing time up for strategic initiatives. 

Gonen Fink, EVP of Products, Cortex, Palo Alto Networks
"Unleashing autonomous agents without tight control is a recipe for disaster. That's why we built AgentiX on our proven Cortex platform, delivering the full power of agentic AI with the control, traceability and permission management every enterprise demands. When applied to security teams, this isn't just automation; it's the end of manual toil. We're freeing your experts to transform the SOC, not just chase alerts."

Unlike siloed approaches that focus on automating individual SOC tasks, AgentiX delivers end-to-end workflow autonomy. It's the only agentic AI platform built on a decade of security automation leadership and trained on 1.2 billion real-world playbook executions. Additionally, to help ensure seamless support for all critical enterprise tools, AgentiX comes with over 1,000 prebuilt integrations and native Model Context Protocol (MCP) support.

With Cortex AgentiX, organizations can: 

  • Deploy the industry's most experienced security agents: Go beyond rigid playbooks with prebuilt agents that work as a seamless extension of your operations, with the first set including:
    • Threat Intelligence Agent: Aggregates and enriches threat intelligence to uncover related cases and emerging adversary techniques.
    • Email Investigation Agent: Automates a full-spectrum email threat response, from search and analysis to containment, across all platforms.
    • Endpoint Investigation Agent: Delivers rapid analysis, forensics collection and host containment across every major EDR platform.
    • Network Security Agent: Orchestrates threat response, policy control and network management across Palo Alto Networks and third-party firewalls.
    • Cloud Security Agent: Secures cloud environments end-to-end, from posture and application protection to detection and response.
    • IT Agent: Streamlines enterprise IT operations by automating upgrades, patching, troubleshooting, and user onboarding.
  • Build your own custom no-code agents: Rapidly create powerful AI agents with an elegant GenAI builder that leverages over 1,000 prebuilt integrations, native MCP support as well as robust guardrails for total control.
  • Orchestrate complex workflows across the entire enterprise: Launch context-aware agents directly from any Cortex product or orchestrate complex, enterprise-wide actions from the standalone AgentiX platform.
  • Govern autonomous action with enterprise-grade guardrails: Safely operate AI agents with role-based access controls and require human-in-the-loop approval for impactful actions, helping ensure agentic workflows are safe and reliable. Every agent action comes with full auditability to support the strictest compliance and security requirements.

Francis Odum, Founder of Software Analyst Cyber Research (SACR)
"Cortex AgentiX stands apart by building its agentic workforce on Palo Alto Networks existing SecOps backbone and a decade of SOAR maturity. This foundation is crucial: It ensures agents operate within a fully governed automation framework, unlike newer entrants that often lack enterprise-grade policy enforcement and traceability. By deploying natively across XSIAM, XDR and Cortex Cloud, Palo Alto Networks is uniquely positioned as the leader in agentic AI, delivering the scale, breadth and compliance standards required for the autonomous enterprise."

Cortex AgentiX is available today in Cortex Cloud™ and Cortex XSIAM®. Cortex XDR® and the standalone AgentiX platform will be available in early 2026.

To learn more, read the blog. Then, register for Ignite: What's Next and hear more about all the upcoming innovations from Palo Alto Networks on Tuesday, October 28, at 9 a.m. PT.  Visit our official news center for the latest announcements, news and developments from Ignite: What's Next.

About Palo Alto Networks

As the global AI and cybersecurity leader, Palo Alto Networks (NASDAQ: PANW) is dedicated to protecting our digital way of life via continuous innovation. Trusted by more than 70,000 organizations worldwide, we provide comprehensive AI-powered security solutions across network, cloud, security operations and AI, enhanced by the expertise and threat intelligence of Unit 42®. Our focus on platformization allows enterprises to streamline security at scale, ensuring protection fuels innovation. Explore more at www.paloaltonetworks.com.

Palo Alto Networks, Cortex, Cortex Cloud, Cortex AgentiX, Cortex XSOAR, Cortex XSIAM, Cortex XDR, Agentix, and the Palo Alto Networks logo are trademarks of Palo Alto Networks, Inc. in the United States and in jurisdictions throughout the world. All other trademarks, trade names, or service marks used or mentioned herein belong to their respective owners.

This press release contains forward-looking statements that involve risks, uncertainties and assumptions, including, without limitation, statements regarding the benefits, impact, or performance or potential benefits, impact or performance of our products and technologies or future products and technologies. These forward-looking statements are not guarantees of future performance, and there are a significant number of factors that could cause actual results to differ materially from statements made in this press release, including, without limitation: developments and changes in general market, political, economic, and business conditions; risks associated with managing our growth; risks associated with new products and subscription and support offerings; shifts in priorities or delays in the development or release of new offerings, or the failure to timely develop, release and achieve market acceptance of new products and subscriptions as well as existing products and subscription and support offerings; failure of our business strategies; rapidly evolving technological developments in the market for security products and subscription and support offerings; our customers' purchasing decisions and the length of sales cycles; our competition; our ability to attract and retain new customers; and our ability to acquire and integrate other companies, products, or technologies. We identify certain important risks and uncertainties that could affect our results and performance in our most recent Annual Report on Form 10-K, our most recent Quarterly Report on Form 10-Q, and our other filings with the U.S. Securities and Exchange Commission from time-to-time, each of which are available on our website at investors.paloaltonetworks.com and on the SEC's website at www.sec.gov. All forward-looking statements in this press release are based on information available to us as of the date hereof, and we do not assume any obligation to update the forward-looking statements provided to reflect events that occur or circumstances that exist after the date on which they were made.