Navigate the Cortex Cloud Runtime Security docs

Start here for a visual overview of the main Runtime Security documentation areas.

Cortex Cloud Runtime Security unifies posture, runtime, and investigation workflows.

Start here to find the right path fast.

1. Set up Runtime Security

Onboard and configure Set up your tenant, users, cloud accounts, and connectors.

Onboard and Configure

Deployment checklist Follow the main activation sequence.

Deployment steps and checklist

Post-deployment setup Finish access and environment setup.

Post-deployment steps

2. Secure and assess your environment

Threat management Detect threats with rules and analytics.

Threat Management

Web and API Security Protect web apps and APIs.

Web and API Security (WAAS)

Asset inventory Review assets, groups, roles, and scores.

Asset Managment

Cloud ASM Discover exposed and unmanaged cloud assets.

Cloud attack surface management

Vulnerability management Prioritize vulnerabilities across assets.

Vunerability Management

3. Investigate and respond

Cases and issues Triage, investigate, and respond.

Cases and issues

Dashboards and reports Track posture, activity, and trends.

Dashboards and reports

XQL Run advanced queries across your data.

Cortex Cloud XQL

Graph Search Explore relationships between assets and findings.

Graph Search

4. Expand coverage

Data Security Protect sensitive data stores.

Cortex Data Security

Identity Security Review identities and permissions.

Cortex Cloud Identity Security

Compliance Track standards and assessments.

Compliance

Cloud workload rules and policies Manage detections and preventive controls.

Cloud Workload Policies and Rules

Serverless protection Cover serverless posture and runtime security.

Serverless Function Posture Security

Serverless function runtime security

Data sources and onboarding Connect cloud accounts and integrations.

Cortex Cloud Data Sources and Connectors

Use the table of contents when you know the exact page. Use this page when you need a fast overview.