Cortex Marketplace

Search the Cortex Marketplace and find content. Search by use cases, integrations, and categories.

Content in Marketplace is organized into content packs to support specific security orchestration use cases. Content packs are created by Palo Alto Networks, technology partners, contributors, and customers.

Cortex XDR supports free content packs, which are either Cortex XDR or partner-supported content packs. You can restrict a user role from managing content packs in Marketplace when defining/editing user roles.

In Marketplace, you can browse all content packs (including installed content) or view only installed content packs.

You can search for content packs by entering text in the search bar and selecting the relevant content pack from the search results.

You can sort content packs by latest update, best match, recommended, number of downloads, and filter according to the following criteria:

• Use cases: Filter according to high-level use cases.
• Integrations: Filter according to the integration included in the content pack.
• Categories: Filter according to content pack categories.
• Published: Filter according to whether published by Cortex XDR or by Cortex XDR technology partners.
• Content Pack Includes: Filter according to the content of the content pack, such as scripts, integrations, and playbooks.
• Tags: Filter according to tags, such as Issues, Actions, Network, and Security.

When clicking a content pack you can view detailed information including content that it installs (such as scripts, playbooks, and integrations), dependencies (what content packs are required or optional) and version history (including whether you want to roll back to earlier versions).

You can view Marketplace content packs from within Cortex XDR (go to Settings → Configurations → Marketplace) or at Cortex Developer Docs Marketplace.