* [Blog](https://www2.paloaltonetworks.com/blog) * [Palo Alto Networks](https://www2.paloaltonetworks.com/blog/corporate/) * [Announcement](https://www2.paloaltonetworks.com/blog/category/announcement/) * Forrester Names Palo Alto... # Forrester Names Palo Alto Networks a Leader in XDR [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2024%2F06%2Fforrester-names-palo-alto-networks-a-leader-in-xdr%2F) [](https://twitter.com/share?text=Forrester+Names+Palo+Alto+Networks+a+Leader+in+XDR&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2024%2F06%2Fforrester-names-palo-alto-networks-a-leader-in-xdr%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2F2024%2F06%2Fforrester-names-palo-alto-networks-a-leader-in-xdr%2F&title=Forrester+Names+Palo+Alto+Networks+a+Leader+in+XDR&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/2024/06/forrester-names-palo-alto-networks-a-leader-in-xdr/&ts=markdown) \[\](mailto:?subject=Forrester Names Palo Alto Networks a Leader in XDR) Link copied By [Gonen Fink](https://www.paloaltonetworks.com/blog/author/gonen-fink/?ts=markdown "Posts by Gonen Fink") Jun 03, 2024 5 minutes [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown) [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown) [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown) [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [Cloud detection and response](https://www.paloaltonetworks.com/blog/tag/cloud-detection-and-response/?ts=markdown) [Cortex XDR](https://www.paloaltonetworks.com/blog/tag/cortex-xdr/?ts=markdown) [digital forensics](https://www.paloaltonetworks.com/blog/tag/digital-forensics/?ts=markdown) [EDR](https://www.paloaltonetworks.com/blog/tag/edr/?ts=markdown) [endpoint protection](https://www.paloaltonetworks.com/blog/tag/endpoint-protection/?ts=markdown) [endpoint security](https://www.paloaltonetworks.com/blog/tag/endpoint-security/?ts=markdown) [Forrester Wave](https://www.paloaltonetworks.com/blog/tag/forrester-wave/?ts=markdown) [Threat Hunting](https://www.paloaltonetworks.com/blog/tag/threat-hunting/?ts=markdown) This post is also available in: [简体中文 (Chinese (Simplified))](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=zh-hans "Switch to Chinese (Simplified)(简体中文)") [繁體中文 (Chinese (Traditional))](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=zh-hant "Switch to Chinese (Traditional)(繁體中文)") [Français (French)](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=fr "Switch to French(Français)") [Deutsch (German)](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=de "Switch to German(Deutsch)") [Italiano (Italian)](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=it "Switch to Italian(Italiano)") [日本語 (Japanese)](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=ja "Switch to Japanese(日本語)") [한국어 (Korean)](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=ko "Switch to Korean(한국어)") [Português (Portuguese (Brazil))](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=pt-br "Switch to Portuguese (Brazil)(Português)") [Español (Spanish)](https://www2.paloaltonetworks.com/blog/2024/07/forrester-names-palo-alto-networks-a-leader-in-xdr/?lang=es "Switch to Spanish(Español)") ### With Cortex XDR, Palo Alto Networks Is Recognized as a Leader in the 2024 Forrester Wave for Extended Detection and Response Platforms Since our founder, Nir Zuk, first coined the term "extended detection and response" nearly 6 years ago, we have been on a mission to make XDR the foundation of modern security operations. Security operations teams play a vital role in safeguarding their organizations against cyberthreats, yet many fall behind their adversaries in a sea of alerts and complex security products. XDR platforms enable analysts to cut through the noise with automatic attack behavior detection and precise guidance for remediation. **Today, we are excited to announce that Cortex XDR has been recognized as a Leader in The Forrester Wave™: Extended Detection and Response (XDR) Platforms, Q2 2024**, with several acknowledgments: * **Commitment to Disruption** -- Evident from our monetary investment in R\&D and continuous delivery of quality features. * **Empowering Analysts --** To detect and respond effectively. * \*\*Enhancements --\*\*Centered on enabling more platform features and analytics for identity and cloud. [![Forrester Wave Leader 2024 XDR](https://www.paloaltonetworks.com/blog/wp-content/uploads/2024/06/cortex-xdr_forrester-wave-report-2024_blog2_400x300-1.png)](https://start.paloaltonetworks.com/2024-forrester-xdr-wave-leader) Being named a Leader in this Forrester Wave affirms for us the success that security operations teams have achieved with our Cortex platform and our continued commitment to helping customers stay ahead of the cyberthreats they face. To all the customers who have trusted Cortex XDR with their organization's defense, thank you for your commitment and partnership. [Read the Full Report](https://start.paloaltonetworks.com/2024-forrester-xdr-wave-leader) ## The Forrester Wave for Extended Detection and Response Platforms The Forrester Wave is an evaluation intended to help buyers make informed decisions on technology products. The analysts at Forrester assess each vendor for the strength of their offering, strategy and market presence. The evaluation itself is a thorough analysis of each of these areas, coupled with a product demonstration and firsthand testimonials from reference customers. Each area of the evaluation receives a score, allowing customers to evaluate individual criteria quantitatively and compare these results between vendors. Cortex XDR received the top score possible: 5 out of 5, in a majority of the criteria evaluated. Forrester describes a score of 5 as "Superior relative to others in this evaluation." A few areas are worth highlighting among the rest: * \*\*Vision (5/5) --\*\*Our vision for Cortex XDR is to set the foundation of SecOps transformation, leading with a prevention-first approach to security at the endpoint, owning the accountability for detection and response with AI-driven analytics, and enabling consolidation to a single platform for the SOC. * **AI \& Machine Learning (5/5) --** Cortex XDR uses thousands of machine learning models for threat prevention, detection, user and entity risk scoring, as well as incident prioritization applied to data from all integrated sources. * **Endpoint Protection (5/5) --** Cortex XDR manages prevention, detection and response from a single console, with out-of-the-box prevention profiles that deliver immediate protection against advanced threats. * **Innovation (5/5)** -- Our approach to innovation for Cortex XDR is grounded in a deep understanding of the needs and challenges of security operations, resulting in continuous advancements that enable customers to outpace their adversaries. * **Additional Detection Surfaces (5/5)** -- Cortex XDR ingests, normalizes and runs analytics on a wide range of first-party and third-party telemetry for detection, from network security products, cloud providers, identity systems and many others. Cortex XDR also received a score of 5/5 in the following areas: response, threat hunting, administrative controls, analyst experience, deployment model, training and community. ## Why We Believe XDR Is a Foundation for Modern Security Operations > Its company vision -- a world where each day is more secure than the one before -- aligns with its product vision, a prevention-first approach and empowering analysts to detect and respond effectively. *---The Forrester Wave™: Extended Detection And Response Platforms, Q2 2024* For those struggling to keep up with the pace of threats, false positives and product integration in the SOC, we understand how overwhelming the job can be. Practitioners may often feel like they're always behind, but we're here to offer support. Our vision for Cortex XDR represents a complete paradigm shift from this reality. First, we take a prevention-first approach to endpoint security, so we can ensure the highest level of protection against every possible attack vector. By relentlessly tracking and anticipating adversary techniques, we build protections that enable customers to thwart the vast majority of attack scenarios before they can gain a foothold in their organization. The SOC can then use Cortex XDR as a central point of visibility, detection and response, incorporating data from endpoints, network firewalls, cloud security, identity providers and other third-party sources. We take responsibility for tracking attack behavior across the globe and training our machine learning models, so customers can detect attacks at machine speed. Both our prevention and detection analytics were tested in the [latest MITRE Engenuity evaluation](https://www.paloaltonetworks.com/blog/2023/09/mitre-engenuity-attck-evaluations-results/), where Cortex XDR delivered 100% prevention and detection with no configuration changes. With XDR, the SOC has a comprehensive view of the entire attack narrative and its root cause for precise remediation. The impact is significant -- real-time analysis of data at a scale beyond human capacity, with AI identifying threats. This represents a transformational advancement in security. Finally, we believe that Cortex XDR is the foundation of the modern SOC, on which customers can add use cases tailored to their organization's requirements. This includes orchestration and automated responses with our XSOAR capabilities, and attack surface management with Xpanse. All of which are fully integrated within our AI-driven platform -- Cortex XSIAM. ## The Cortex Revolution Embarking on this journey with Cortex is a proven path for exceptional results -- accelerating detection to machine speed and reducing response from days to mere minutes. This is the capability the SOC should possess today, and it's achievable with Cortex XDR as its foundation. Customers who want to augment their teams can call upon our [trained XMDR partners](https://www.paloaltonetworks.com/resources/datasheets/managed-detection-and-response) or tap into our Unit 42 experts through our [managed detection and response (MDR) service](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response). We are truly honored by the recognition as a Leader in this Forrester Wave for XDR, and our dedication to delivering the utmost security outcomes for our customers remains unwavering. Download your complimentary copy today and read [The Forrester Wave™: Extended Detection And Response Platforms, Q2 2024.](https://start.paloaltonetworks.com/2024-forrester-xdr-wave-leader) *** ** * ** *** ## Related Blogs ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Palo Alto Networks Excels in MITRE Managed Services Evaluation](https://www2.paloaltonetworks.com/blog/2024/06/unit-42-mdr-in-mitre-managed-services-evaluation/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Company \& Culture](https://www.paloaltonetworks.com/blog/category/company-culture/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### 2022 MITRE Engenuity ATT\&CK Evaluations Results](https://www2.paloaltonetworks.com/blog/2022/03/mitre-engenuity-evaluations-round-4-results/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Cortex XDR Rides The Forrester Wave as a Leader](https://www2.paloaltonetworks.com/blog/2021/05/forrester-endpoint-security-software-as-a-service/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Reports](https://www.paloaltonetworks.com/blog/category/reports/?ts=markdown) [#### A Leader in the 2025 Gartner Magic Quadrant for EPP --- 3 Years Running](https://www2.paloaltonetworks.com/blog/2025/07/named-a-leader-gartner-magic-quadrant/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown) [#### What's New in Cortex: The Latest Innovations for the World's #1 SecOps Platform (Feb '25 Release)](https://www2.paloaltonetworks.com/blog/security-operations/whats-new-in-cortex-the-latest-innovations-for-the-worlds-1-secops-platform-feb-25-release/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/category/partners/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Palo Alto Networks Cortex and IBM Enhance Modern Incident Response](https://www2.paloaltonetworks.com/blog/2023/02/cortex-and-ibm-enhance-modern-incident-response/) ### Subscribe to the Blog! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language