* [Blog](https://www2.paloaltonetworks.com/blog) * [Cloud Security](https://www2.paloaltonetworks.com/blog/cloud-security/) * [Announcement](https://www2.paloaltonetworks.com/blog/cloud-security/category/announcement/) * Introducing Cortex Cloud ... # Introducing Cortex Cloud 2.0: Smarter Cloud Security for an AI-Driven World [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fcloud-security-platform-cortex-cloud-2-0%2F) [](https://twitter.com/share?text=Introducing+Cortex+Cloud+2.0%3A+Smarter+Cloud+Security+for+an+AI-Driven+World&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fcloud-security-platform-cortex-cloud-2-0%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fcloud-security%2Fcloud-security-platform-cortex-cloud-2-0%2F&title=Introducing+Cortex+Cloud+2.0%3A+Smarter+Cloud+Security+for+an+AI-Driven+World&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/cloud-security/cloud-security-platform-cortex-cloud-2-0/&ts=markdown) \[\](mailto:?subject=Introducing Cortex Cloud 2.0: Smarter Cloud Security for an AI-Driven World) Link copied By [Elad Koren](https://www.paloaltonetworks.com/blog/author/elad-koren/?ts=markdown "Posts by Elad Koren") Oct 28, 2025 5 minutes [Announcement](https://www.paloaltonetworks.com/blog/cloud-security/category/announcement/?ts=markdown) [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown) [CNAPP](https://www.paloaltonetworks.com/blog/cloud-security/category/cnapp/?ts=markdown) [Code to Cloud to SOC](https://www.paloaltonetworks.com/blog/cloud-security/category/code-to-cloud-to-soc/?ts=markdown) AI is accelerating innovation faster than ever. With AI assisted coding, teams are building cloud-native applications at an unprecedented speed. Rapid development, of course, introduces risks and vulnerabilities into production. [One in three pieces of GenAI code](https://www.paloaltonetworks.com//socradar.io/every-1-of-3-ai-generated-code-is-vulnerable-exploring-insights-with-cyberseceval/?ts=markdown) contains vulnerabilities, giving adversaries an advantage that compounds exponentially. Attackers are also moving twice as [quickly to exfiltrate data](https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report?utm_source=google-jg-amer-unit42-unrc-unpt&utm_medium=paid_search&utm_campaign=google-unit42-unit42_port-amer-multi-lead_gen-en-brand&utm_content=7014u000001ZyZbAAK&utm_term=unit%2042%20incident%20response&cq_plac=&cq_net=g&gad_source=1&gad_campaignid=20369915902&gbraid=0AAAAADHVeKkAU_g008KKFFsosSjKP0B8m&gclid=EAIaIQobChMIppGdhfSFjwMVNjBECB1mdSI4EAAYASABEgJss_D_BwE) from multicloud environments. It's clear, in other words, that the question isn't if attackers find your blind spots but when---and whether you'll be ready. We built [Cortex^®^ Cloud^TM^](https://www.paloaltonetworks.com/blog/2025/02/announcing-innovations-cortex-cloud/) to solve this problem. Traditional CNAPPs only react after an issue emerges, creating a dangerous lag in the era of AI-driven development. We took the first critical step by unifying best-in-class cloud detection and response (CDR) and industry-leading cloud-native application protection platform (CNAPP) capabilities on the Cortex^®^ platform. Now, to meet the new challenge of AI-driven threats, we are introducing Cortex Cloud 2.0 to bring the power of autonomous AI agents to cloud security. ## Inside Cortex Cloud 2.0 ### Autonomous Resolution with AI Agents Picture an exposed storage bucket with sensitive data, a vulnerable container image with an exposed key or an overpermissive role that creates a privileged escalation risk. Instead of tickets and delays, Cortex Cloud links the signals, calculates the blast radius, recommends the least-disruptive fix, and executes. It achieves this in minutes with end-to-end automation, not days. Driven by autonomy from Cortex^®^ AgentiX^TM^---trained on more than a billion real-world responses---Cortex Cloud turns analysis into action while keeping you in control. Every step is visible and auditable and aligned with existing roles and permissions. And scale comes built in. In Cortex Cloud 2.0, common issues are resolved with one-click and ready-to-go playbooks, while natural-language prompts generate new automations that adapt as environments change. The result is a significant drop in MTTR and a backlog that finally disappears. ### Secure Cloud Workloads without Impacting Performance Cloud performance demands minimal resource overhead. Security demands deep visibility and enforcement. Until now, those goals have competed. Cortex Cloud 2.0 ends the trade-off. Its new, performance-optimized agent delivers best-in-class detection and prevention, identifying threats faster and with greater precision while cutting resource use in half. Powered by the same analytics that correlate data across code, cloud and runtime, it processes telemetry in milliseconds, turning raw signals into immediate, actionable insight. Teams can protect more workloads without paying a tax in compute or cost, including those once considered too performance-sensitive for continuous monitoring. The agent runs in both full and optimized modes, so protection levels can shift instantly---without a reinstallation or disruption. Teams get stronger protection that sees more, acts sooner, and stays invisible to performance. ### Unify and Prioritize Risks Through Reimagined UX Security leaders want to understand their cloud posture, but that often means jumping between dashboards, stitching together data, and guessing what to fix first. The Cortex Cloud command centers present your entire cloud security program---coverage, gaps, active threats and recommended actions---on a single, elegant canvas designed for instant comprehension. From a convenient dropdown menu, each team can choose their domain's command center. Application security teams see code-level findings through the ASPM Command Center. Cloud security analysts view infrastructure posture and threats in the Cloud Command Center. Every member of your security team sees a consistent source of truth, intuitively laid out and expressed in the language and priorities of their role. ![Cloud Security Command Center shows threat and posture cases side by side.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/10/word-image-347198-1.png) Figure 1: Cloud Security Command Center shows threat and posture cases side by side. Exemplifying simplicity, the Cortex Cloud command centers streamline how teams move from insights to action. Related security issues that share a single corrective path are grouped in cases and presented in a short list that guides users toward the best fix. Everything sits just a click or two away. People can see their estate at a glance, focus on the right few items, and quickly act without digging for information. ### Shift Left Gets Smarter While preventing risk has always been the ideal, achieving it has never been simple. Most shift-left efforts stop at identifying vulnerabilities in development, leaving teams with long lists of findings and little context, and failing to prevent risks from reaching production. In Cortex Cloud 2.0, the Application Security Command Center unites signals from code, cloud and runtime into a single view, giving developers precise, actionable guidance before code ever ships. Each recommendation reflects real-world impact, so fixes align with business risk. ![Each case delivers rich context for immediate action at scale.](https://www.paloaltonetworks.com/blog/wp-content/uploads/2025/10/word-image-347198-2.png) Figure 2: Each case delivers rich context for immediate action at scale. Security intelligence appears where developers already work. In popular IDEs and version control systems, [Cortex Cloud ASPM](https://www.paloaltonetworks.com/blog/cloud-security/introducing-aspm-cortex-cloud/) surfaces context-rich insights and one-click fixes that close issues early and fast. The result is prevention that fits naturally into existing workflows, without slowing velocity or creativity. ## Defining a New Standard in Cloud Security [Cortex Cloud 2.0](https://www.paloaltonetworks.com/cortex/cloud/latest) breaks down silos and helps enterprises accelerate their cloud security transformations. Every improvement---faster automation, better protection, simpler insight---helps your team act without hesitation. Cloud innovation won't slow down. Neither will the threats that follow it. With Cortex Cloud, security isn't a choice between keeping up and leading the way. It's already doing both. ## Learn More Cortex Cloud is generally available to customers today, with the new advancements in Cortex Cloud 2.0 available in early 2026. To learn more about the innovations in this release, register for the [Cortex Forward Series](https://www.paloaltonetworks.com/cortex/cortex-forward-series?utm_campaign=cloudwebinar). For security leaders evaluating the platform landscape, the [CNAPP Buyer's Guide](https://start.paloaltonetworks.com/cnapp-buyers-guide.html) offers a framework for assessing integration across code, cloud and SOC, including criteria to measure prevention maturity through unified visibility and control. *** ** * ** *** ## Related Blogs ### [Announcement](https://www.paloaltonetworks.com/blog/cloud-security/category/announcement/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [CNAPP](https://www.paloaltonetworks.com/blog/cloud-security/category/cnapp/?ts=markdown), [Data Security Posture Management](https://www.paloaltonetworks.com/blog/cloud-security/category/data-security-posture-management/?ts=markdown) [#### Prisma Cloud Innovations: September's Highlights](https://www2.paloaltonetworks.com/blog/cloud-security/feature-innovations-2024/) ### [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Cloud-Native Application Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-native-application-protection-platform/?ts=markdown), [CNAPP](https://www.paloaltonetworks.com/blog/cloud-security/category/cnapp/?ts=markdown) [#### How Auto-Remediation Shifts the Odds in Cloud Security](https://www2.paloaltonetworks.com/blog/cloud-security/auto-remediation-cnapp/) ### [Cloud Detection and Response](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-detection-and-response/?ts=markdown), [Cloud Runtime Security](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-runtime-security/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Cloud Workload Protection](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection/?ts=markdown), [CNAPP](https://www.paloaltonetworks.com/blog/cloud-security/category/cnapp/?ts=markdown) [#### Taking Cloud Security from Visibility to Prevention with eBPF](https://www2.paloaltonetworks.com/blog/cloud-security/ebpf-cloud-security-real-time-protection/) ### [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [CNAPP](https://www.paloaltonetworks.com/blog/cloud-security/category/cnapp/?ts=markdown), [Code to Cloud](https://www.paloaltonetworks.com/blog/cloud-security/category/code-to-cloud/?ts=markdown) [#### Overcoming Cloud Security Consolidation Challenges](https://www2.paloaltonetworks.com/blog/cloud-security/cloud-security-consolidation-challenges/) ### [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Cloud Workload Protection Platform](https://www.paloaltonetworks.com/blog/cloud-security/category/cloud-workload-protection-platform/?ts=markdown), [CNAPP](https://www.paloaltonetworks.com/blog/cloud-security/category/cnapp/?ts=markdown), [KSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/kspm/?ts=markdown) [#### Anatomy of a Kubernetes Attack: How Cortex Cloud Provides End-to-End Protection](https://www2.paloaltonetworks.com/blog/cloud-security/kubernetes-attack-detection-response/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [CNAPP](https://www.paloaltonetworks.com/blog/cloud-security/category/cnapp/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Introducing Cortex Cloud --- The Future of Real-Time Cloud Security](https://www2.paloaltonetworks.com/blog/2025/02/announcing-innovations-cortex-cloud/) ### Subscribe to Cloud Security Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} ## Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) ## Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) ## Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language