Feature Enhancements
These enhancements provide new and improved capabilities.
General
Administrator control for saved views and filters
Keep your workspace clean and relevant. Administrators can now remove unused or outdated saved views and filters, including those created by other users.
Access Management
Expanding SBAC with Account Name
Scope-Based Access Control (SBAC) has been enhanced to provide more granular control over your access policies. You can now define Asset Groups that include the Account Name attribute for scope-based access control. Continue to use the existing Realm attribute whenever you need to scope based on the Account ID.
Automation
Performance improvements for scripts and playbooks
Enhance the user experience when managing security workflows with modernized interface improvements and optimized memory usage across the Scripts and Playbooks pages to maintain a seamless and cohesive user experience.
Cortex Agentic Assistant
Chat with the Agentic Assistant directly in Slack
Access Agentic Assistant more easily across your daily applications. You can now trigger the Agentic Assistant from your Slack, give it tasks, interact with it and get the results on your existing workspace.
MCP content packs
Cortex Agentic Assistant supports native interaction with Model Context Protocol (MCP) so agents can seamlessly communicate with third-party servers to automate more complex security and accelerate incident response. We expanded agent interoperability with MCP support for Atlassian Cloud, CloudFlare and GitHub.
Enhanced AI product support
The upgraded Help Center agent delivers instant how-to support and helps you navigate in-product support cases. It stays aware of your support issues to provide more relevant guidance in context.
Investigation and response
Centralized issue resolution
Simplified issue-level remediation by centralizing all remediation actions in one place. From the Resolution tab, you can access recommended and pending actions, run playbooks, and complete manual playbook tasks, with seamless sync to the case's Resolution Center.
Investigation and Response
Issue exceptions
Formalize risk deferrals and align security alerts with operational constraints using issue exceptions. This feature allows you to "snooze" or exempt specific issues while maintaining oversight through documented justifications and an approval workflow.
Last updated
Was this helpful?