How much does Palo Alto Networks cost?

Not retrieved. Enterprise sales led with a platformisation strategy that bundles across network, cloud and security operations, so AgentiX pricing is likely entangled with Cortex platform agreements rather than standalone until the separate AgentiX platform ships. Palo Alto sells to public sector, so per the Arctic Wolf finding, state and federal procurement schedules may carry real figures.

What are the best alternatives to Palo Alto Networks?

Based on documented capability coverage across the Agentic Index 14 point taxonomy, the closest alternatives to Palo Alto Networks among security and SOC agents are SentinelOne, Zeron, Command Zero, Cyware. Each is graded on the same public evidence, and no vendor pays for placement.

Does Palo Alto Networks support MCP and tool calling?

Full under the Agentic Index verification standard. Palo Alto Networks publishes public evidence of Model Context Protocol (MCP) support, tool calling, and API or SDK extensibility for connecting agents to external tools. Evidence basis: BUILT IN MODEL CONTEXT PROTOCOL SUPPORT is stated first party, alongside a generative AI builder for custom no code agents, 1,100 integrations as the extension surface, and a standalone AgentiX platform arriving early 2026 that decouples th. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Does Palo Alto Networks have SOC 2, SSO and role based access control?

Full under the Agentic Index verification standard. Palo Alto Networks publishes public evidence of enterprise security and identity controls, covering a compliance posture such as SOC 2 or ISO 27001, single sign on (SSO or SAML), and role based access control (RBAC). Evidence basis: Security governance IS the product: permission management, policy enforcement and traceability are named as the design centre of AgentiX, backed by Unit 42 threat intelligence and a portfolio spanning network, cloud and security operations. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Does Palo Alto Networks give you tracing and observability into agent runs?

Full under the Agentic Index verification standard. Palo Alto Networks publishes public evidence of tracing, observability and audit logging into agent runs, so a team can see what an agent did and why. Evidence basis: TRACEABILITY is named as a core deliverable alongside control and permission management, Cortex Extended Data Lake provides a single source of truth across security operations, and an independent analyst specifically contrasts the fully gov. Graded from public evidence only against the Agentic Index 14 point capability taxonomy. No vendor pays for placement.

Back to vendors

Palo Alto Networks

Q: Who is Palo Alto Networks for?

large enterprise, security operations centres, cloud security teams, IT operations, public sector

Also known as: PANW, Palo Alto, Cortex AgentiX, AgentiX, Cortex XSIAM, Cortex XSOAR, Cortex Cloud, Cortex XDR, Prisma AIRS, Unit 42, Cortex Extended Data Lake

Visit site

Security / SOC agentpublicVerified 2026-08-07

Entry priceContact sales; currently bundled within Cortex XSIAM and Cortex CloudFull pricing detail

The largest pure play security vendor as an agent platform: Cortex AgentiX builds, deploys and governs an agent workforce on a decade of SOAR, trained on 1.2 billion real playbook executions, with built in MCP.

Palo Alto Networks is the largest pure play cybersecurity company, and Cortex AgentiX is its agent platform. Unveiled in October 2025 and positioned as the next generation of Cortex XSOAR, AgentiX builds, deploys and governs what the company calls an AI agent workforce, starting in the security operations centre and extending to IT operations and cloud security.

The differentiator is provenance. AgentiX is trained on more than 1.2 billion real world playbook executions accumulated across a decade of security orchestration, which is an unusually concrete training corpus claim. It ships with over 1,300 playbooks and 1,100 integrations, built in Model Context Protocol support, and named prebuilt agents including a Cloud Security Agent and an IT Agent, alongside a generative AI builder for custom no code agents.

The governance framing is explicit and matches the pattern seen across this index. Palo Alto states that unleashing autonomous agents without tight control is a recipe for disaster, and that autonomy must be built in rather than bolted on, delivering agentic capability with control, traceability and permission management. An independent analyst makes the same point from outside, noting AgentiX operates within a fully governed automation framework where newer entrants often lack enterprise grade policy enforcement and traceability.

Reported outcomes are up to a 98 percent reduction in mean time to respond with 75 percent less manual work. The urgency case comes from the company own Unit 42 research, which finds attackers now operate up to four times faster than a year earlier and can execute end to end attacks in as little as 72 minutes.

The honest limits are model choice and evaluation, neither of which is documented, and deployment options beyond the Cortex cloud estate were not retrieved.

Vendor details

Canonical URL

https://www.paloaltonetworks.com

Subcategory

Agentic security operations platform

Funding status

Public company, NASDAQ: PANW, trusted by more than 70,000 organisations worldwide. Completed a roughly 25 billion USD acquisition of CyberArk in February 2026, its largest ever, and has announced an intent to acquire Koi to secure the agentic endpoint. Previously acquired Protect AI, now Prisma AIRS.

Company status

public

Use cases & customers

Primary use cases

autonomous security operations centre responsecloud security posture, detection and responseIT operations automation including patching and onboardingcustom no code security agent buildinggoverned agent workflows with traceability and permission management

Target customers

large enterprisesecurity operations centrescloud security teamsIT operationspublic sector

Deployment options

Cortex Cloudembedded in Cortex XSIAM and Cortex XDRstandalone AgentiX platform from early 2026

Integrations

More than 1,100 prebuilt integrations and 1,300 playbooks inherited from a decade of SOAR leadership, with BUILT IN MODEL CONTEXT PROTOCOL SUPPORT. A generative AI builder lets customers create custom no code agents against that integration library. Deploys natively across Cortex XSIAM, Cortex XDR and Cortex Cloud rather than as a bolt on, with Cortex Extended Data Lake as the shared data foundation.

In practice

A SOC replaces manual triage with prebuilt agents that plan, reason and execute a full response workflow end to end, against playbooks the organisation already trusted under XSOAR.

A cloud security team lets agents investigate and resolve posture and detection issues autonomously, with guardrails ensuring every automated action stays inside the organisation's existing policy.

A platform team builds a custom agent in the GenAI builder against 1,100 existing integrations rather than writing new connectors, with MCP support for reaching tools outside the Cortex estate.

Sources & related URLs

Research sources

https://investors.paloaltonetworks.com/news-releases/news-release-details/palo-alto-networks-unveils-cortex-agentix-build-deploy-and https://www.paloaltonetworks.com/blog/2025/10/agentic-ai-platform-for-agentic-workforce-future/ https://www.paloaltonetworks.com/blog/2026/02/soc-agentic-next-evolution-cortex/ https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-completes-acquisition-of-cyberark-to-secure-the-ai-era

Agentic Index coverage score

11.0 / 14 capabilities · 79%

Integrations & Tool CallingMore than 1,100 prebuilt integrations with BUILT IN MODEL CONTEXT PROTOCOL SUPPORT, deployed natively across Cortex XSIAM, Cortex XDR and Cortex Cloud, with a generative AI builder letting customers compose custom agents against that library. Palo Alto Networks AgentiX product pages and Cortex release blog 2026-08-07	Full
Workflow OrchestrationCortex AgentiX is positioned as the next generation of Cortex XSOAR and delivers FULL WORKFLOW AUTONOMY FROM START TO FINISH rather than automating individual tasks, with prebuilt agents that dynamically plan, reason and execute, backed by more than 1,300 playbooks and a decade of SOAR maturity. Palo Alto Networks AgentiX launch and product blog 2026-08-07	Full
Knowledge Grounding & RAGCortex Extended Data Lake provides the data foundation and single source of truth for security operations, agents are TRAINED ON MORE THAN 1.2 BILLION REAL WORLD PLAYBOOK EXECUTIONS, and Unit 42 threat intelligence supplies external grounding. The training corpus claim is the most concrete provenance statement in this index. Palo Alto Networks AgentiX launch and Cortex blog 2026-08-07	Full
Human Oversight & GuardrailsStated design principle that unleashing autonomous agents without tight control is a recipe for disaster and that AUTONOMY MUST BE BUILT IN NOT BOLTED ON, delivered through control, traceability and permission management, with enterprise grade guardrails ensuring automated actions always stay inline with the organisation's existing policies and practices. An independent analyst confirms agents operate within a fully governed automation framework. Palo Alto Networks AgentiX launch and SACR commentary 2026-08-07	Full
Security, Identity & GovernanceSecurity governance IS the product: permission management, policy enforcement and traceability are named as the design centre of AgentiX, backed by Unit 42 threat intelligence and a portfolio spanning network, cloud and security operations across 70,000 organisations, now including CyberArk identity security and Prisma AIRS. VERIFICATION FLAG: Palo Alto's own corporate attestations were not retrieved in this pass; confirm before citing. Palo Alto Networks product and corporate materials 2026-08-07	Full
Observability & AuditabilityTRACEABILITY is named as a core deliverable alongside control and permission management, Cortex Extended Data Lake provides a single source of truth across security operations, and an independent analyst specifically contrasts the fully governed automation framework with newer entrants that lack enterprise grade policy enforcement and traceability. Palo Alto Networks AgentiX launch and SACR commentary 2026-08-07	Full
Memory & State PersistenceCortex Extended Data Lake persists unified security data that agents operate against as durable shared context, but no agent memory or learned context layer distinct from that data platform is documented. Same shape as the airtable, pega and gong rulings. Palo Alto Networks Cortex blog 2026-08-07	Partial
Deployment & Data ResidencyDelivered through Cortex Cloud and embedded in Cortex XSIAM and XDR, with a standalone AgentiX platform arriving early 2026, but no self hosted option, government cloud detail or published residency matrix was retrieved in this pass despite Palo Alto serving public sector customers. Palo Alto Networks AgentiX availability statements 2026-08-07	Partial
Prebuilt Agents, Templates & PacksMore than 1,300 prebuilt playbooks and 1,100 integrations carried forward from XSOAR, plus named prebuilt agents including a Cloud Security Agent and an IT Agent that ship ready to run rather than requiring assembly. Among the deepest packaged libraries in the index. Palo Alto Networks AgentiX product blog 2026-08-07	Full
Triggers & Channel CoverageAlert and detection driven across the SOC, cloud and endpoint estates, operating in real time to counter attacks Unit 42 research puts at end to end execution in as little as 72 minutes, with agents embedded natively in XSIAM, XDR and Cortex Cloud so triggers arrive from the whole telemetry surface. Palo Alto Networks Cortex blog 2026-08-07	Full
Model Flexibility & RoutingA generative AI builder underpins custom agent creation and the platform is described as AI driven throughout, but no model selection, provider choice, routing configuration or bring your own model capability was documented in this pass. Palo Alto Networks AgentiX product materials 2026-08-07	Partial
APIs, SDKs & MCP ExtensibilityBUILT IN MODEL CONTEXT PROTOCOL SUPPORT is stated first party, alongside a generative AI builder for custom no code agents, 1,100 integrations as the extension surface, and a standalone AgentiX platform arriving early 2026 that decouples the agent layer from the Cortex products it currently ships inside. Palo Alto Networks Cortex blog and AgentiX launch 2026-08-07	Full
Testing, Debugging & OptimizationAgents are trained and validated against 1.2 billion real world playbook executions, which is evidence of pre deployment grounding, and the reported 98 percent MTTR reduction implies measurement, but no customer facing evaluation harness, simulation mode or regression testing capability was documented. Palo Alto Networks AgentiX materials 2026-08-07	Partial
Browser & Computer UseAgents act through integrations, playbooks and APIs across the security estate; no browser control, page navigation or computer use capability is documented. Note the adjacent move: Palo Alto announced intent to acquire Koi to secure the AGENTIC ENDPOINT covering AI code packages, browser extensions and plugins, but that is protecting that surface rather than an agent operating it. Palo Alto Networks Cortex blog 2026-08-07	Unable to verify

The Agentic Index coverage score grades every vendor Full, Partial or Unable to verify against the same 14 buyer facing capabilities, from public evidence only. Each capability links to how all vendors in the index score on it. How this evidence is graded

Pricing

Contact sales; currently bundled within Cortex XSIAM and Cortex Cloud

enterprise platform agreement, not disclosed

Included quota

Not disclosed. AgentiX is currently available embedded within Cortex Cloud and Cortex XSIAM rather than as a separately metered product.

What is public

Product availability and packaging are public. No prices were retrieved from any Palo Alto source in this pass.

Billing mechanics

Not publicly disclosed. Direct enterprise sales and channel, structured around multi product platform agreements rather than per product licences.

Cost watchouts

Platformisation is the commercial strategy, so the practical question is not what AgentiX costs but what the Cortex platform commitment costs and what AgentiX adds to it. The standalone AgentiX platform arriving in early 2026 may change that shape materially and is worth waiting to price against. Following the CyberArk acquisition, identity security is being folded into the same platform story, so a buyer already holding CyberArk licences should establish how the two agreements interact before renewing either.

Variable cost rationale

Nothing commercial is published and the vendor's stated strategy is deliberate bundling across multiple product families, which makes the marginal cost of the agent capability structurally hard to isolate. The metering unit for the forthcoming standalone platform is unknown, and platform agreements of this size are negotiated per customer with scope dominating price.

Additional watchouts

Do not price AgentiX in isolation while it ships embedded. Price the Cortex platform commitment, then establish the delta, and revisit when the standalone platform lands.

Overage / add-ons

Not disclosed.

Sales call required

Yes, required for paid access

Free / trial

None retrieved

Commercial notes

Public company (NASDAQ: PANW) serving more than 70,000 organisations, so aggregate financials are visible in filings. **Sells extensively to public sector, which per the Arctic Wolf finding means STATE AND FEDERAL PROCUREMENT SCHEDULES are a realistic independent source of actual pricing - worth checking rather than accepting contact only.**

Key ambiguities

Whether AgentiX will meter by agent, by action, by playbook execution or as a platform entitlement once the standalone version ships. Given the product is built on 1.2 billion historical playbook executions, an execution based unit would be a natural fit and would tie cost directly to automation volume.

Missing data

All pricing, the AgentiX metering unit, and how the standalone platform will be licensed relative to the embedded version.

Agentic Index verified 2026-08-07

Official pricing page

Related vendors

Alternatives to Palo Alto Networks

The closest documented capability profiles to Palo Alto Networks among security and SOC agents tracked by Agentic Index, ordered by similarity on the same 14 point evidence the rankings use. No vendor pays for placement.

SentinelOne11.0 / 14Matches Palo Alto Networks across all 14 documented capabilities
Zeron11.5 / 14Fuller documented coverage on Deployment & Data Residency
Command Zero11.0 / 14Fuller documented coverage on Memory & State Persistence
Cyware12.0 / 14Adds documented Browser & Computer Use
Seemplicity10.0 / 14A lighter documented profile than Palo Alto Networks
ThreatModeler12.0 / 14Fuller documented coverage on Memory & State Persistence and Model Flexibility & Routing

Similarity is computed from each vendor's Agentic Index coverage score evidence, axis by axis, not from the totals. How this evidence is graded

Compare Palo Alto Networks with other vendors →Compare all security and SOC agents →See where Palo Alto Networks ranks →

Data confidence: high