> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases/expander-release-23-minor-releases.md).

# Expander Release 2.3 (Minor Releases)

The table below describes the features and enhancements introduced in the Expander 2.3 minor releases.

| Feature                                                    | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | Date          |
| ---------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------- |
| **Incident severity deprecation**                          | <p>Expander no longer supports the concept of incident severity. We encourage customers to use the incident risk score instead, which is a more precise method of prioritization.</p><ul><li>Incidents now show risk scores in place of severity.</li><li>Incident severity widgets are no longer supported.</li><li>The Security Admin and My Overview dashboards have been retired.</li></ul>                                                                                                                          | December 2023 |
| **Updated version information for services and incidents** | For each service classification on a service, Expander now shows the 10 most recently observed details about that classification, such as observed software versions and device models.                                                                                                                                                                                                                                                                                                                                  | December 2023 |
| **Dynamic incident headlines**                             | Expander updates the incident headline to match the most recent alert that is highest severity and has the status New or In Progress. The headline automatically updates when an alert is resolved or a new alert is created.                                                                                                                                                                                                                                                                                            | December 2023 |
| **Reordering of alerts in an incident**                    | On the Overview tab of an incident, alerts are now ordered with the highest severity open alerts at the top of the list.                                                                                                                                                                                                                                                                                                                                                                                                 | December 2023 |
| **Alerts tab added to the main navigation**                | An Alerts tab has been added to the main navigation under Incident Response, making it quicker and more intuitive to access the Alerts table.                                                                                                                                                                                                                                                                                                                                                                            | December 2023 |
| **Default filter for Alerts table**                        | The Alerts table is now filtered on Resolution Status by default.                                                                                                                                                                                                                                                                                                                                                                                                                                                        | December 2023 |
| **Dynamic alert name**                                     | Expander updates the alert name to display the software version observed in the latest scan.                                                                                                                                                                                                                                                                                                                                                                                                                             | December 2023 |
| **Improved alert details page**                            | <p>The following improvements make it easier and faster to find details about specific alerts:</p><ul><li>When you select an alert in the Alerts table, the details now open as a full page on a separate tab in your browser.</li><li>The alert details page now has a Service/Website tab to make it easier to find service classifications and website technologies.</li><li>The alert details now has an Assets tab with contextual information that was used to attribute the asset to your organization.</li></ul> | December 2023 |
| Estimated Alert Count field                                | The Estimated Alert Count field was added to the Attack Surface Rules table. Use this field to see the estimated number of alerts Xpanse will create if the attack surface rule is enabled.                                                                                                                                                                                                                                                                                                                              | November 2023 |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xpanse-expander-rn/features-introduced-before-2026/2023-releases/expander-release-23-minor-releases.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.