Palo Alto Networks Launches Cortex XDR One AI Platform
The new platform secures autonomous AI agents against prompt injection and unauthorized API calls.
Updated on Oct. 22, 2026 in Artificial Intelligence
Live Poll
Do you trust that businesses can securely manage the AI agents they use for internal operations?
Palo Alto Networks has launched the Cortex XDR One platform, which integrates endpoint detection and response with specialized security for autonomous AI agents. The platform is now available as a shipped product for enterprise environments.
Why it matters
As enterprises increasingly grant AI agents access to sensitive financial and production systems, those agents risk inheriting broad user permissions. This release addresses security gaps like prompt injection and unauthorized API calls that stem from non-deterministic AI behavior.
The system utilizes small language models running locally on the sensor to identify and block threats. This approach achieves a 95% reduction in false positives compared to conventional detection baselines.
The players
Palo Alto Networks
A global cybersecurity firm providing cloud-delivered security platforms and enterprise endpoint protection.
Koi
A technology startup whose specialized agentic security tools were integrated into the Cortex platform.
Unit 42
The threat intelligence and incident response division of Palo Alto Networks that now provides managed agentic security services.
The details
Cortex XDR One provides visibility and control over AI software at both the runtime layer and the operating system level. By using a single sensor to collect telemetry, it links attack chains across different domains, identifying anomalous behavior that suggests prompt injection or indirect data poisoning. The platform incorporates technology from the startup Koi to facilitate autonomous agent protection.
Timeline
October 22, 2026: Palo Alto Networks launched the Cortex XDR One platform.
The Tech Race
Cortex XDR One evolves the existing Cortex XDR product line to address the unique risk profile of autonomous AI agents. It competes directly against emerging security stacks designed to monitor and gatekeep AI interactions with production databases and API endpoints.
The platform is available immediately for organizations seeking to secure AI-driven workflows involving customer data and financial ledgers. Users can deploy the capabilities either as a standalone Cortex Agentic Endpoint Security module or as part of the full Cortex XDR One package.
The takeaway
Enterprise security teams should evaluate whether their current endpoint protection can inspect AI runtime layers for unauthorized API calls. Watch for future updates from Unit 42 on the performance of managed agentic security in production environments.
Further reading
Explore broader trends in autonomous systems and security at Artificial Intelligence.
Source note: This article includes information reported by SecurityBrief Asia.
Live Poll
Do you trust that businesses can securely manage the AI agents they use for internal operations?
