* [Blog](https://www.paloaltonetworks.com.au/blog) * [Security Operations](https://www.paloaltonetworks.com.au/blog/security-operations/) * [Data Security](https://www.paloaltonetworks.com.au/blog/category/data-security/) * Cortex Data Security -- Ne... # Cortex Data Security -- New AI-Native Operating Model for Protecting Data -- Goes GA [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fsecurity-operations%2Fcortex-data-security-ga-dlp-ddr%2F) [](https://twitter.com/share?text=Cortex+Data+Security+%E2%80%93+New+AI-Native+Operating+Model+for+Protecting+Data+%E2%80%93+Goes+GA&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fsecurity-operations%2Fcortex-data-security-ga-dlp-ddr%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fsecurity-operations%2Fcortex-data-security-ga-dlp-ddr%2F&title=Cortex+Data+Security+%E2%80%93+New+AI-Native+Operating+Model+for+Protecting+Data+%E2%80%93+Goes+GA&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com.au/blog/security-operations/cortex-data-security-ga-dlp-ddr/&ts=markdown) \[\](mailto:?subject=Cortex Data Security – New AI-Native Operating Model for Protecting Data – Goes GA) Link copied By [Yotam Ben-Ezra](https://www.paloaltonetworks.com/blog/author/yotam-ben-ezra/?ts=markdown "Posts by Yotam Ben-Ezra") Sep 15, 2026 5 minutes [Data Security](https://www.paloaltonetworks.com/blog/category/data-security/?ts=markdown) [Data Security Platform](https://www.paloaltonetworks.com/blog/security-operations/category/data-security-platform/?ts=markdown) [DDR](https://www.paloaltonetworks.com/blog/security-operations/category/ddr/?ts=markdown) [DLP](https://www.paloaltonetworks.com/blog/security-operations/category/dlp/?ts=markdown) [DSPM](https://www.paloaltonetworks.com/blog/security-operations/category/dspm/?ts=markdown) We're pleased to announce that after two months in public preview, Cortex Data Security is now generally available. And we're already looking ahead to the comprehensive platform's next stage: Our October release will include two new capabilities, **DLP Harmonization** and **Unified DDR** , further advancing our vision for unified data protection across cloud, legacy, and AI infrastructure. ## Updating the Data Security Paradigm for the AI-Enabled Enterprise AI transformation is still top of mind for the organizations we help protect. Autonomous agents are becoming further embedded into operational processes -- from coding, through business automation, to customer-facing interfaces. And with this proliferation of agents, data flows are far less predictable and exponentially faster. As such, to prevent sensitive data exposure, security must adapt. In this new era, visibility is not enough. What's needed is a unified operating model for protecting data across posture, prevention, and response. With a unified paradigm in place, policies, detection, automation, and AI-powered remediation all feed from a single source of truth -- updated in real time and faithful to the organization's reality. Teams can then proactively monitor and respond to data security incidents at agent speed and with end-to-end context. Cortex Data Security was designed to provide that foundation at a scale that's needed to support the world's largest, most data-intensive organizations. As a unified platform, it brings together core data security capabilities -- discovery, classification, posture and compliance, remediation, and more -- applying them universally wherever data is stored, accessed, or used by human actors or AI agents. ## Bolstering Platform Capabilities After positive feedback during its public preview period, Cortex Data Security, as mentioned earlier, is now generally available. In our [public preview announcement](https://www.paloaltonetworks.co.uk/blog/security-operations/cortex-data-security-ai-data-protection/), we introduced the platform's initial set of features and capabilities. These included DSPM-powered discovery and classification of sensitive data across cloud, SaaS, AI, and on-premises environments; a unified DLP and DDR experience for Cortex XDR customers; AI lifecycle security that maps and monitors models, agents, and the data flows between them; agentic automation with integrated SOAR, including natural language investigation and remediation through XSOAR and AgentiX; and access governance for every identity that interacts with sensitive data -- be it human or nonhuman, including AI agents. The October addition of two new strategic capabilities -- DLP Harmonization and Unified DDR -- will significantly expand how Cortex Data Security unifies policy visibility and detects and responds to data threats. ### DLP Policy Harmonization Data loss prevention (DLP) is one of the main sources of policy sprawl and repetitive work for security teams. DLP policies tend to multiply across every surface that needs to be protected -- legacy tools used in on-premises environments, point solutions for web browsers and email clients, and modern tooling adopted during the cloud transformation era. Each tool might support different conventions and levels of automation, and keeping policies aligned and up to date is a labor-intensive activity that often falls by the wayside. Policy inflation also leads to alert inflation, making remediation more difficult than necessary. Cortex Data Security aims to be the single source of policy truth for an organization, regardless of where the rules were originally defined. As a first step in that direction, users will be able to view, normalize, and enrich policies from **Microsoft Purview** and from **Cortex Endpoint DLP** . This will enable them to spot duplicate policies, optimize rules, and identify gaps in data protection across their organization. ![Policy Harmonization in Cortex Data Security](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/09/image1-1.png) Image 1: Policy Harmonization in Cortex Data Security ### Unified DDR Pioneered by Palo Alto Networks, data detection and response (DDR) has become an industry standard for data security products. With the upcoming October release, Cortex Data Security will include Unified DDR to enable near-real-time detection and response to data security incidents across cloud data stores, SaaS, and AI infrastructure. The platform will centralize a host of DDR alerts -- including anomalous logins, training data poisoning, data exfiltration, and dozens of other detections -- in a unified dashboard across SaaS, cloud, and AI infrastructure. Each alert will be enriched and contextualized with the insights generated by Cortex Cloud DSPM (posture and data classification) and by identity data via IdP integrations. Powered by our proprietary AI and ML models, Cortex will use this entire context to surface the most relevant incidents within seconds, or minutes, without overwhelming security and ops teams with false positives. ## More to Come General availability marks an important milestone for Cortex Data Security, but it's only the beginning. With DLP Harmonization and Unified DDR coming in October, we're continuing to expand the platform's coverage, integrations, and ability to help security teams detect and respond to data risk faster. As the AI transformation continues to gain momentum, data will remain a major focus for organizations. The Cortex platform plays a key role in enabling this transformation and in reducing the risks of AI adoption. [Learn more and get started](https://www.paloaltonetworks.com/cortex/data-security). *** ** * ** *** ## Related Blogs ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Data Security Platform](https://www.paloaltonetworks.com/blog/security-operations/category/data-security-platform/?ts=markdown), [DDR](https://www.paloaltonetworks.com/blog/security-operations/category/ddr/?ts=markdown), [DLP](https://www.paloaltonetworks.com/blog/security-operations/category/dlp/?ts=markdown), [DSPM](https://www.paloaltonetworks.com/blog/security-operations/category/dspm/?ts=markdown) [#### Announcing the Public Preview of Cortex Data Security: Unified Data Protection for the AI Era](https://www.paloaltonetworks.com.au/blog/security-operations/cortex-data-security-ai-data-protection/) ### Subscribe to Security Operations Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com.au/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language