Configure the Cortex Agentic Assistant

Configure AI agents, actions, knowledge, and access controls in Cortex AgentiX.

The Cortex Agentic Assistant helps SOC teams investigate and respond through AI agents. Agents turn requests into plans and execute approved actions within each user's permissions.

How the components work together

An agent is a specialized virtual persona for a domain or workflow. It selects from its assigned actions to build and run a plan.

Actions wrap capabilities such as playbooks, scripts, AI prompts, and commands. Add only the actions each agent needs.

Knowledge gives agents business-specific context and Cortex product expertise. Knowledge sources and MCP integrations can extend an agent's context and capabilities.

Role-based access control defines who can use chat, manage actions, and manage agents. Agents never exceed the permissions of the user running them.

Configure your agent workforce

1. Review Agentic Assistant components and concepts before designing an agent.
2. Use the Agentic Assistant Hub to register actions, build agents, and assign actions.
3. Add knowledge sources or MCP integrations when the agent needs more context or capabilities.
4. Configure role-based access control before giving users access.