Palo Alto Networks launches Cortex XCOR for AI-driven observability and automated incident response

Palo Alto Networks Introduces Cortex XCOR

Palo Alto Networks has launched Cortex XCOR, a new AI-driven observability platform. This platform is designed to automate the process of identifying the root causes of system issues and recommending solutions, moving beyond traditional dashboard-based monitoring and manual incident response.

The company states that previous challenges in cloud-native architectures and slower pre-AI automation hindered such capabilities. Cortex XCOR was developed by the Chronosphere team, following Palo Alto Networks' acquisition of the cloud-native observability platform company in January.

Automated Incident Investigation

Martin Mao, SVP and GM of observability at Palo Alto Networks, explained that when an alert is triggered, Cortex XCOR deploys a specialized AI agent. This agent autonomously analyzes underlying issues and suggests actions or mitigations.

The goal is to reduce the need for engineers to manually interpret dashboards during incidents, particularly outside of working hours. While Cortex XCOR initially operates with human oversight, engineering teams can gradually increase its autonomous permissions.

Evolving Role of Site Reliability Engineers

The introduction of technologies like Cortex XCOR is expected to change the role of Site Reliability Engineers (SREs). Automation will handle routine root cause analysis and troubleshooting, allowing SREs to focus on more strategic architectural work.

This shift is compared to airline pilots, where autopilot handles routine operations, but experienced personnel are still needed for complex or unexpected situations.