{"id":82,"date":"2026-10-13T10:31:24","date_gmt":"2026-10-13T08:31:24","guid":{"rendered":"https:\/\/mspbusiness.com\/en\/it-news\/palo-alto-networks-launches-cortex-agentic-endpoint-security\/"},"modified":"2026-10-24T22:17:15","modified_gmt":"2026-10-24T20:17:15","slug":"palo-alto-networks-launches-cortex-agentic-endpoint-security","status":"publish","type":"post","link":"https:\/\/mspbusiness.com\/en\/technology-and-architecture\/palo-alto-networks-launches-cortex-agentic-endpoint-security\/","title":{"rendered":"Palo Alto Networks launches Cortex Agentic Endpoint Security"},"content":{"rendered":"

Palo Alto Networks presented Cortex Agentic Endpoint Security (AES) at the ONE Conference 2026 in The Hague. The product is based on technology from Koi and focuses on inventorying, assessing and controlling AI agents, browser extensions, local LLMs and MCP servers on endpoints. Cortex AES is available through the company’s partner network.<\/strong><\/p>\n

With Cortex AES, Palo Alto Networks is targeting software that is active on endpoints but, according to the company, falls outside the reach of existing security tools. This includes AI agents, browser extensions, locally running language models and servers that operate via the Model Context Protocol (MCP). The product can be used as a standalone solution and will also become part of the vendor’s own platform.<\/p>\n

The background according to Palo Alto Networks<\/h3>\n

Palo Alto Networks argues that traditional Endpoint Detection and Response (EDR) systems were designed to recognise malicious executables such as .exe and .dll files. According to the company, software that does not run as such a file largely escapes that detection. The company calls this the ‘Agentic Bypass’: AI agents take on the identity and access rights of the user, making their actions indistinguishable from those of an employee for older security systems.<\/p>\n

The risks Palo Alto Networks cites include data theft via indirect prompt injection, unmanaged API permissions and harmful interactions between agents.<\/p>\n

Inventory, assessment and control<\/h3>\n

According to the vendor, Cortex AES acts as a control layer on the endpoint and is built around three functions. The first is visibility: the product automatically maps AI artefacts, including AI applications unknown to IT, browser extensions and MCP servers.<\/p>\n

The second function is risk assessment. A risk engine looks at the publisher’s reputation, behavioural characteristics and access rights of a component to determine whether it poses a threat. The third function is control: administrators can set policies and guardrails to stop processes or block them in advance. Palo Alto Networks states that this is done without hampering user productivity.<\/p>\n

Alongside existing EDR or within the platform<\/h3>\n

Cortex AES is now available as a standalone solution that can run alongside EDR systems from other vendors, such as CrowdStrike or Microsoft. Installation is carried out via a persistent script which, according to the company, places little load on the system and enables continuous monitoring.<\/p>\n

For customers already using the Palo Alto Networks platform, the company is announcing two integrations. In Cortex XDR, the technology will become an integrated module, so that traditional and AI-related threats are handled from a single agent. Within Prisma AIRS, the functionality will become part of AI model security, from the cloud to the endpoint, with runtime protection against prompt injection.<\/p>\n

Automated remediation<\/h3>\n

The system converts technical telemetry into a risk score. If a specific ‘skill’ or extension turns out to be malicious, an administrator can enforce policy across all endpoints within the organisation with a single action. Palo Alto Networks expects this to reduce manual investigations that currently take hundreds of hours to a matter of minutes. No independent figures supporting this claim have been published.<\/p>\n

The product is available through the Palo Alto Networks partner network. The company has not shared any information on pricing or licensing models.<\/p>\n","protected":false},"excerpt":{"rendered":"

Palo Alto Networks presents Cortex Agentic Endpoint Security for assessing AI agents on endpoints. The product runs alongside existing EDR systems and is available through partners.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"mspb_bron_id":1169147,"mspb_url_nl":"https:\/\/mspbusiness.com\/technologie-en-architectuur\/palo-alto-networks-brengt-cortex-agentic-endpoint-security-uit\/","mspb_url_de":"https:\/\/mspbusiness.com\/de\/technologie-und-architektur\/palo-alto-networks-bringt-cortex-agentic-endpoint-security-auf-den-markt\/","mspb_url_en":"","mspb_beeld_url":"https:\/\/mspbusiness.com\/wp-content\/uploads\/2026\/10\/hero-1791880270912.png","mspb_beeld_klein":"https:\/\/mspbusiness.com\/wp-content\/uploads\/2026\/10\/hero-1791880270912-400x225.png","mspb_auteur":"Redactie","mspb_beeld_alt":"","mspb_video":"","_yoast_wpseo_metadesc":"Palo Alto Networks introduces Cortex Agentic Endpoint Security, which maps and manages AI agents, extensions and MCP servers on endpoints.","footnotes":""},"categories":[5],"tags":[],"layout":[6],"class_list":["post-82","post","type-post","status-publish","format-standard","hentry","category-technology-and-architecture","layout-news"],"_links":{"self":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/82","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/comments?post=82"}],"version-history":[{"count":1,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/82\/revisions"}],"predecessor-version":[{"id":83,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/posts\/82\/revisions\/83"}],"wp:attachment":[{"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/media?parent=82"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/categories?post=82"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/tags?post=82"},{"taxonomy":"layout","embeddable":true,"href":"https:\/\/mspbusiness.com\/en\/wp-json\/wp\/v2\/layout?post=82"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}