What is Cortex Xpanse?
Cortex Xpanse is an active attack surface management (ASM) solution that helps organizations actively discover, learn about and respond to unknown risks in all connected systems and exposed services. It automatically and continually scans the entire internet, actively discovering and indexing unknown risks in all connected systems and exposed services.
Why should you care?
Cortex Xpanse allows SOC teams to be proactive in discovering any high-risk vulnerabilities and misconfigurations. It actively discovers unknown risks in all connected systems and exposed services. Machine-learning models continuously map the attack surface and prioritize remediation efforts, reducing the mean time to detect (MTTD) as well as the mean time to respond (MTTR) without additional analysts.
How does it work?
Cortex Xpanse gathers data from DNS records, domain registrars, business registration databases and dozens of other data sources to comprehensively discover and accurately identify all your customers' internet assets. This in turn, allows Cortex Xpanse to build an intelligent internet inventory that is unique to an organization. Cortex Xpanse discovers the unknowns without your customers having to install or configure anything with an intelligent inventory of all their known and unknown assets, reducing their attack surface.
Differentiation in the market
Cortex Xpanse provides a complete lists of an organization's global internet-facing assets, enabling organizations to continuously discover, evaluate and mitigate their external attack surface. Other ASM tools focus on using domains to identify assets. This can lead to limited asset discover, which isn't ideal for large, distributed organizations.
Cortex Xpanse allows your customers to improve their SOC efficiency, increase their return on investment, allows you to stay safe and save costs. Features such as Expander allow your customers to see their assets by IP ranges, certificates domains and cloud resources. Cortex Xpanse finds hundreds of types of exposures including remote access protocols, email services, database servers, control and automation systems and prioritizing these can be a challenge. Cortex Xpanse detects risks on your customers' asset inventory and prioritizes remediation according to the unique needs of the organization.
How to position and sell Cortex Xpanse?
Cortex Xpanse offers complete protection by monitoring every asset an organization has on the internet. Cortex Xpanse empowers organizations with real-time global view of their complete attack surface. Cortex Xpanse offers the following benefits and features for network security and threat prevention:
- Automatically uncovers stealthy attacks using machine learning
- Stops alert fatigue and attrition by validating security alerts in seconds
- Reduces mean time to identify and mean time to contain
- Increases return on investments
- Provides deeper visibility enabling advanced threat hunting by unlocking additional analytics and machine learning detectors
- Sharpens the ability to identify, prevent and block attacks
- Proactively hunts with advanced analytics and behavioral models
Arrow is here to help
Arrow's Palo Alto Networks team provides training and enablement, helping partners generate pipeline and build customer confidence to accelerate sales. In addition, the Arrow Solutions Lab allows you to mix and match different components and test designed solutions in a real-world environment. These tools help customers make informed decisions.
