Palo Alto Networks Introduced AI Observability Platform
The Cortex XCOR platform automates root-cause analysis, aiming to reduce engineer burnout from incident response.
Updated on Oct. 5, 2026 in Artificial Intelligence

Live Poll
Do you believe AI automation makes your professional life better or increases your job insecurity?
Palo Alto Networks has introduced Cortex XCOR, an observability platform that utilizes AI agents to conduct root-cause analysis for system incidents. The tool is designed to identify technical issues significantly faster than traditional manual methods.
Why it matters
As cloud-native architectures grow more complex and telemetry volumes surge, manual troubleshooting has become a primary driver of engineer burnout. This platform attempts to automate the high-pressure task of firefighting and late-night paging.
Cortex XCOR achieves an average root-cause analysis time of under three minutes, compared to the 20 minutes typically required for manual investigation. In complex environments, the platform maintains a 75% success rate, with an additional 19% of analyses providing useful diagnostic output.
The players
Palo Alto Networks
A cybersecurity company providing enterprise-grade security, infrastructure management, and observability stacks.
Chronosphere
A developer of cloud-native observability software acquired by Palo Alto Networks to bolster data analysis capabilities.
Embrace
A company specializing in mobile monitoring and observability that Palo Alto Networks announced intent to acquire in July 2026.
The details
The platform functions through the XCOR Fabric, which feeds application, infrastructure, and institutional context into AI agents via a knowledge graph. These agents trigger automatically whenever an alert fires to perform the initial investigation. This approach replaces standard reactive paging with an automated layer that synthesizes system data, building on integration technology acquired from Chronosphere in January 2026.
Timeline
January 2026: Palo Alto Networks completed the acquisition of Chronosphere.
July 2026: The company announced its intent to acquire Embrace.
Last week: Palo Alto Networks officially introduced the Cortex XCOR platform.
The Tech Race
The introduction of Cortex XCOR follows the acquisition of Chronosphere and the pending integration of Embrace, positioning Palo Alto Networks against specialized observability providers. This move indicates a shift toward bundling backend and front-end monitoring into a single autonomous stack.
Engineers currently face an average manual response time of 20 minutes to locate system issues, which this platform aims to reduce to under three minutes. While the tool currently pages engineers, the company plans to increase autonomous remediation permissions as the platform matures.
The takeaway
Palo Alto Networks is betting that replacing manual firefighting with autonomous agents can solve the unsustainable burden of cloud-native system management. Watch for the future integration of Real User Monitoring, which will signal the company's move toward a full-stack observability lifecycle.
Further reading
For broader trends in automated system monitoring, visit the Artificial Intelligence section.
Source note: This article includes information reported by The New Stack.
Live Poll
Do you believe AI automation makes your professional life better or increases your job insecurity?









