The unified platform combines extended detection and response with AI agent security, aiming to close gaps created by autonomous tools accessing enterprise systems and sensitive data.
Palo Alto Networks has introduced Cortex XDR One, a unified endpoint security platform designed to protect enterprise systems against threats targeting both traditional operating systems and autonomous AI agents.
Announced in Mumbai on October 26, the platform combines Extended Detection and Response (XDR) with Cortex Agentic Endpoint Security through a single interface and sensor. It addresses emerging risks associated with enterprise use of AI coding agents, copilots, Model Context Protocol (MCP) servers and other AI tools that can interact directly with business applications and data.
As organisations give AI agents access to databases, production code, financial systems and customer management platforms, their inherited user permissions and unpredictable behaviour can create new security challenges. Potential attack methods include prompt injection, indirect data poisoning and unauthorised API calls, which conventional endpoint protection and basic software containers may not adequately address.
“Cortex XDR One expands endpoint protection to govern AI agents at the source, enforce OS-level boundaries, and stop evasive threats in real time.” — Orcun Tezel, Vice President, Technical Solutions, Asia Pacific & Japan, Palo Alto Networks
“ The expansion of agentic capabilities across enterprise endpoints demands a security posture that treats AI agents with the same rigour and control as traditional system processes,” said Orcun Tezel, Vice President, Technical Solutions, Asia Pacific & Japan at Palo Alto Networks.
Cortex XDR One provides visibility into AI applications, packages and extensions installed across enterprise endpoints, helping security teams identify unapproved or unmanaged tools. Its dual-layer enforcement combines runtime safeguards for AI agents with operating-system monitoring intended to block exploits and malicious activity.
The platform also uses lightweight small language models running directly on endpoint sensors to inspect and block evasive threats, including fileless attacks, without sending sensitive code to the cloud. Palo Alto Networks says consolidating telemetry through a single sensor can reduce false positives by up to 95% and support automated remediation.
Organisations can deploy Cortex Agentic Endpoint Security alongside third-party endpoint detection and response products or integrate it through the full Cortex XDR One platform. Customers can also access managed detection and response and agentic security services through Unit 42.
The technology incorporates capabilities from Koi, an agentic security startup whose technology was initially deployed internally by Palo Alto Networks’ information security team.
The launch reflects a growing challenge for enterprise security teams: protecting not only the devices and users accessing corporate systems, but also AI agents acting with delegated permissions across business-critical environments.