Cortex XDR
Cortex XDR is the industry's only detection and response platform that runs on fully integrated endpoint, network and cloud data.Use this official Palo Alto Networks app to send custom notification on alerts generated by Cortex XDR.Each notification includes important information on the alert such as the severity, timestamp and category of the alert, and is embedded with a link allowing you to further investigate the alert by pivoting to the Cortex XDR management console.Determine which alerts you would like to be notified on and which channels you would like to be notified in through the Cortex XDR management console.
Permissions
Cortex XDR will be able to view:
Cortex XDR will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Palo Alto Networks
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Cortex XDR applies retention policies that purge data once it is no longer needed for the purpose for which it was collected.
Data archiving and removal policy
Upon termination of Cortex XDR service, all data in Cortex XDR will be marked for deletion.
Data storage policy
Upon termination, after 30 days data inactive systems in Cortex XDR will be marked inactive and may be recovered up to thirty days, after which it will be deleted from the active systems. Deletion of backup data may take up to an additional 120 days.
App/service has sub-processors
no
App/service uses large language models (LLM)
no
Certifications & compliance
Data deletion request procedure
The customer can contact our support service in order to open a request to mark his data for deletion.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Not supported
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
securitydisclosure@paloaltonetworks.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no