Palo Alto Networks Cortex Cloud SaaS Security Extends Coverage to 100 Applications

Palo Alto Networks introduced Cortex Cloud SaaS Security in late October 2026 through the Cortex Cloud 2.3 release. The update integrates SaaS security tools into the existing Cortex Cloud platform and extends protection to roughly 100 applications at launch.

Unified visibility and risk correlation across SaaS and cloud

The platform delivers continuous assessment of SaaS configurations and compliance status. It correlates findings from SaaS applications with cloud workloads to map attack paths and prioritize remediation based on actual exposure.

Key functions include identity and data security controls plus monitoring of AI agents operating inside connected applications. The service identifies misconfigurations, excessive permissions and sensitive data exposure that span multiple environments.

Integration with Cortex AgentiX enables agentic AI workflows for investigation and automated response. Enterprises can now apply the same policy framework to both traditional cloud resources and the growing number of SaaS tools in use.

Background on enterprise exposure and platform context

Unit 42 data from 2026 shows that 87 percent of attacks involve multiple surfaces, including SaaS, cloud and identity layers. Projections indicate AI agents will appear in 75 percent of enterprises by 2028, raising the number of connected identities and data flows that require monitoring.

Before this release, security teams often managed separate tools for SaaS posture and cloud security, leading to gaps in visibility. Cortex Cloud SaaS Security combines these domains under one console while retaining existing Cortex capabilities for network and endpoint telemetry.

Director of Industry Solutions Siddharth Deshpande noted that the unified approach helps organizations protect sensitive data and accelerate response through automated agentic workflows. The initial release focuses on the most widely adopted business applications and their associated identities and data stores.

Next steps for customers and platform development

Existing Cortex Cloud customers can enable the new SaaS module through the platform console without additional infrastructure changes. Palo Alto Networks expects broader adoption as organizations consolidate point solutions into the single platform.

Future updates will expand the list of supported SaaS applications and add deeper autonomous remediation features. No specific release dates beyond ongoing platform evolution have been announced.