* [Blog](https://www.paloaltonetworks.com.au/blog) * [Cloud Security](https://www.paloaltonetworks.com.au/blog/cloud-security/) * [AI Security](https://www.paloaltonetworks.com.au/blog/cloud-security/category/ai-security/) * Introducing Cortex Cloud ... # Introducing Cortex Cloud SaaS Security: Secure the Entire Attack Surface Across SaaS and Cloud [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fcloud-security%2Fintroducing-cortex-cloud-saas-security%2F) [](https://twitter.com/share?text=Introducing+Cortex+Cloud+SaaS+Security%3A+Secure+the+Entire+Attack+Surface+Across+SaaS+and+Cloud&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fcloud-security%2Fintroducing-cortex-cloud-saas-security%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fcloud-security%2Fintroducing-cortex-cloud-saas-security%2F&title=Introducing+Cortex+Cloud+SaaS+Security%3A+Secure+the+Entire+Attack+Surface+Across+SaaS+and+Cloud&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com.au/blog/cloud-security/introducing-cortex-cloud-saas-security/&ts=markdown) \[\](mailto:?subject=Introducing Cortex Cloud SaaS Security: Secure the Entire Attack Surface Across SaaS and Cloud) Link copied By [Sarit Tager](https://www.paloaltonetworks.com/blog/author/sarit-tager/?ts=markdown "Posts by Sarit Tager") Oct 28, 2026 4 minutes [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown) [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown) [Data Security](https://www.paloaltonetworks.com/blog/cloud-security/category/data-security/?ts=markdown) [Identity Security](https://www.paloaltonetworks.com/blog/cloud-security/category/identity-security/?ts=markdown) [SaaS Security](https://www.paloaltonetworks.com/blog/cloud-security/category/saas-security/?ts=markdown) [SSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/sspm/?ts=markdown) Modern enterprises operate across an increasingly interconnected ecosystem of SaaS applications, cloud infrastructure, identities and sensitive data. AI agents and third-party integrations are deepening those connections, creating new pathways for attackers to exploit misconfigurations, excessive permissions and exposed resources. Yet security remains fragmented across SaaS and cloud environments, limiting visibility into how individual risks connect and where attackers could move next. Today, Cortex Cloud^TM^ by Palo Alto Networks is introducing SaaS Security to extend unified protection across cloud and SaaS environments. ## The Growing Challenge of Securing Connected Environments SaaS applications and cloud infrastructure are increasingly interconnected through shared identities, integrations, and access to sensitive data. Business-critical data moves between applications, identities maintain access across systems, and AI agents increasingly interact across both SaaS and cloud environments. A single misconfiguration or overprivileged identity can create exposure well beyond its originating application. According to the[2026 Unit 42 Global Incident Response Report](https://www.paloaltonetworks.com/unit42), 87% of attacks unfolded across multiple attack surfaces, reinforcing the need to understand risk beyond individual assets and environments. AI adoption introduces further complexity. [Palo Alto Networks](https://www.paloaltonetworks.com/idira/idira-the-roadmap-to-securing-agentic-ai) projects that 75% of enterprises will have autonomous AI agents in production by 2028. As agents gain access to sensitive datasets, enterprise applications and business workflows, security teams must understand not only what AI assets exist, but what they can access and how connections can introduce risk. Protecting these environments requires a unified approach that connects security posture with the identities, data and threats surrounding it. ## Introducing Cortex Cloud SaaS Security Cortex Cloud brings SaaS security into the broader cloud security experience, unifying posture, identity, data, and AI security across SaaS and cloud environments. This integrated approach helps safeguard SaaS applications against misconfigurations, AI risks and data exposure as the attack surface expands. By connecting risks across these four areas, organizations can uncover exposures, investigate potential attack paths and accelerate response with greater context. ### Unify Visibility Across SaaS and Cloud Disconnected security tools make it difficult to establish a complete picture of enterprise exposure. Cortex Cloud addresses this fragmentation by bringing SaaS security findings into a unified view, alongside broader cloud security context. ![SaaS Security Dashboard](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/10/word-image-371507-1.png) *Figure 1: SaaS Security Dashboard* With visibility into ~100 SaaS applications, security teams can examine application posture, identify exposed assets and investigate risks involving identities, sensitive data and AI. The centralized SaaS Security dashboard consolidates security findings and active threat context, making it easier to understand how risks intersect across the connected attack surface. Security teams can also streamline issue prioritization through targeted initiatives, setting risk reduction goals with clear SLAs and tracking progress toward those goals. This helps teams organize remediation and identify where further action is needed. ### Continuously Assess SaaS Security Posture Application configurations change constantly as organizations introduce new integrations, modify access settings and expand SaaS adoption. Without continuous assessment, misconfigurations and risky settings can persist unnoticed. Cortex Cloud continuously evaluates supported SaaS applications for configuration weaknesses, risky integrations and compliance gaps. Security teams can investigate individual findings, monitor posture trends and assess alignment with industry frameworks, replacing fragmented, point-in-time assessments with ongoing security oversight. ### Investigate Connected Identity, Data and AI Risks Understanding an individual finding is only the beginning. Effective investigation requires context around the identities, data and AI resources connected to an exposed asset. Cortex Cloud automatically correlates security context across supported SaaS and cloud environments to reveal relationships that might otherwise go unnoticed. Security teams can discover AI agents, identify dormant agents and examine permissions and connections to datasets, AI endpoints and other resources. Cortex Cloud brings together AI-powered data classification, data access governance and threat detection across supported SaaS applications. Organizations gain a clearer understanding of where sensitive data resides, who can access it and where potential exposures exist. ### Accelerate Response with Agentic AI Identifying connected risks is critical, but reducing exposure requires action. With Cortex AgentiX, organizations can accelerate security investigations and remediation through agentic AI-driven workflows across SaaS and cloud environments, reducing the manual effort required to address complex security findings. ## Secure Your Connected Attack Surface with Cortex Cloud As SaaS, cloud and AI environments converge, isolated security assessments can no longer provide the context needed to manage enterprise risk. [Cortex Cloud SaaS Security](https://www.paloaltonetworks.com/cortex/cloud/saas-security) brings posture, identity, data, AI and threat security together to help organizations understand their connected attack surface and act on emerging exposures. **See Cortex Cloud SaaS Security in action.** [Book a demo](https://www.paloaltonetworks.com/cortex/cloud/demo) to learn more. *** ** * ** *** ## Related Blogs ### [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Data Security](https://www.paloaltonetworks.com/blog/cloud-security/category/data-security/?ts=markdown), [DSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/dspm/?ts=markdown), [SaaS Security](https://www.paloaltonetworks.com/blog/cloud-security/category/saas-security/?ts=markdown), [SSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/sspm/?ts=markdown) [#### Securing the Expanding Cloud Data Footprint Across the Modern Enterprise](https://www.paloaltonetworks.com.au/blog/cloud-security/expanding-cloud-data-footprint/) ### [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [Application Security](https://www.paloaltonetworks.com/blog/cloud-security/category/application-security/?ts=markdown), [AppSec](https://www.paloaltonetworks.com/blog/cloud-security/category/appsec/?ts=markdown), [CIEM](https://www.paloaltonetworks.com/blog/cloud-security/category/ciem-2/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Identity Security](https://www.paloaltonetworks.com/blog/cloud-security/category/identity-security/?ts=markdown), [Supply Chain Security](https://www.paloaltonetworks.com/blog/cloud-security/category/supply-chain-security/?ts=markdown) [#### Introducing Cortex Cloud 2.1](https://www.paloaltonetworks.com.au/blog/cloud-security/visibility-governance-automation/) ### [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [AI-SPM](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-spm/?ts=markdown), [CIEM](https://www.paloaltonetworks.com/blog/cloud-security/category/ciem-2/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [Data Security](https://www.paloaltonetworks.com/blog/cloud-security/category/data-security/?ts=markdown), [DSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/dspm/?ts=markdown) [#### Dissecting Shadow AI to Illuminate Hidden Footprints in Your Workloads](https://www.paloaltonetworks.com.au/blog/cloud-security/shadow-ai-workloads/) ### [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [AI-SPM](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-spm/?ts=markdown), [CIEM](https://www.paloaltonetworks.com/blog/cloud-security/category/ciem/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown), [DSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/dspm/?ts=markdown), [Identity Security](https://www.paloaltonetworks.com/blog/cloud-security/category/identity-security/?ts=markdown) [#### Is AI a New Challenge for Cloud Security? Yes and No.](https://www.paloaltonetworks.com.au/blog/cloud-security/ai-security-gap-cloud-models-agents/) ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [Cloud Security](https://www.paloaltonetworks.com/blog/category/cloud-security/?ts=markdown) [#### The AI Blind Spot in AWS S3 Vectors---And How to Close It](https://www.paloaltonetworks.com.au/blog/cloud-security/ai-blind-spot-aws-s3-vectors/) ### [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown), [AI-SPM](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-spm/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/cloud-security/category/announcement/?ts=markdown), [Data Security](https://www.paloaltonetworks.com/blog/cloud-security/category/data-security/?ts=markdown), [DSPM](https://www.paloaltonetworks.com/blog/cloud-security/category/dspm/?ts=markdown) [#### Securing Enterprise AI Adoption: Palo Alto Networks Integrates with the Claude Compliance API to Enable Safe Use of Claude](https://www.paloaltonetworks.com.au/blog/cloud-security/claude-security-integration-ai-governance/) ### Subscribe to Cloud Security Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com.au/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language