For the complete documentation index, see llms.txt. This page is also available as Markdown.

How can I help you today?

⚡ Cortex Tip of the Week — Week 46

CORTEX XSIAM: Introducing Agents with Enterprise Knowledge in the Nov 2026 Release Turn AI agents into experts on your environment by connecting sources like Google Drive, Confluence, SharePoint, and custom SOPs. Grounded in your internal knowledge, agents deliver hyper-tailored investigations and responses aligned with your team's security practices. Learn more here.

Cortex XDR 6: AgentiX-Driven YARA Rule Management AI-Powered YARA Rule Management uses AgentiX to automatically create, test, and run custom detection across Windows endpoints. Teams can hunt for threats on demand and instantly convert findings into enterprise containment. Learn more here.

Cortex Cloud Runtime Security: Support for IBM Cloud Extend continuous posture management, automated compliance and risk detection across IBM Cloud for unified multi-cloud security. Learn more here.

Introducing Object Access Control APIs in the Nov 2026 Release Manage who can see and edit dashboards, report templates, scripts, playbooks, saved queries, and datasets in code. Get and update access entries, set general access, and transfer ownership through the public API. Learn more here.


November 2026 release notes

The November release adds autonomous security capabilities across Cortex. Cortex XDR 6.0 adds Agentic Endpoint Security, flexible Targeted Sensors, and on-endpoint SLMs. Cortex XSIAM 4.0 adds context-aware AI agent collaborators powered by Frontier AI. Cortex Cloud 2.3 adds SaaS Security for 100+ apps and lightweight eBPF agents for cloud workloads.

Release notes are available for:


Start with a task

Choose a workflow to begin.


Learn

Explore XQL, daily tasks, using APIs, and more.


Latest product updates


Explore products

Last updated

Was this helpful?