Palo Alto Cortex Integration

The Bitsight platform has an integration with Palo Alto Cortex, a comprehensive security orchestration, automation and response platform from Palo Alto Networks. Cortex unifies case management, automation, real-time collaboration, and threat intel management into one place. By combining these insights and those gained from Bitsight SPM with the Bitsight Security Rating:

• CISOs can use Bitsight data to measure, monitor, manage, and report on their cybersecurity program performance over time.
• A universal understanding of cyber risk can be facilitated across the organization.
• Security leaders can provide a more complete historical view of their cybersecurity program’s performance and bring a universal understanding of cyber risk to the Board of Directors and other stakeholders.

The Bitsight-Cortex integration includes both XSOAR and XSIAM solutions.

To Get Started

• This integration can be found on marketplace XSOAR by Palo Alto. 

Things to Know

• As of the December 2025 update, our integration now supports full bi-directional sync (aka mirroring) between Cortex XSOAR incidents and Bitsight findings. Status updates and comments will stay aligned automatically across both platforms.

• Users can now filter findings using the new Findings Affects Rating Reason multiselect field with the following three options (Yes, No: Grace Period, No: Incubation Period), giving the user more precise control over what findings they bring into Cortex XSOAR.

• We've eliminated duplicate findings by ingesting results grouped by rolled-up observation IS and first seen date, ensuring cleaner, more reliable incident ingestion.

• When investigating an incident inside Palo Alto, the "Incident Info" tab displays information such as incident type, severity, timeline, and investigation data in JSON format. A dedicated "Bitsight tab" provides more details, including the affected ratings, asset-related information, evidence key summaries, category, risk vector, and severity.

• The integration pulls data from the following APIs: bitsight-companies-guid-get, bitsight-company-details-get, bitsight-company-findings-get

Terms and Conditions

Access to and use of the Bitsight for Palo Alto Connector is subject to the Bitsight for Palo Alto Connector Terms of Service and the Bitsight Privacy Policy (collectively, the “Bitsight Terms”) as well as and any other terms of service or use noted herein.