> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security.md). # Cloud Security - [Rules and Policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies.md): Discover how Cortex XSIAM detects security risks across your infrastructure, workloads, and container images, and how policies automate the response. - [Cloud security rules and policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies.md): Learn how cloud security rules and policies detect threats and misconfigurations across your Cortex XSIAM environment. - [Cloud security rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/cloud-security-rules.md): Learn about out-of-the-box and custom cloud security rules in Cortex XSIAM. - [Cloud security policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/cloud-security-policies.md): Learn about cloud security policies in Cortex XSIAM. - [Create and manage cloud security rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules.md): Create and manage custom cloud security rules for detecting cloud security risks in Cortex XSIAM. - [Create a graph rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-graph-rule.md): Create custom graph detection rules that identify risky relationships and attack paths in Cortex XSIAM. - [Create a configuration rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-configuration-rule.md): Create Cortex XSIAM configuration rules that identify cloud resource misconfigurations and policy violations. - [Create a data rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-data-rule.md): Create Cortex XSIAM data rules to detect data risks, malware, and classification issues. - [Create an identity rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-identity-rule.md): Create Cortex XSIAM identity rules to detect excessive or unused cloud permissions. - [Create a network exposure rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-a-network-exposure-rule.md): Create Cortex XSIAM network exposure rules to detect risky inbound, outbound, and east-west access. - [Create an AI rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-ai-rule.md): Create Cortex XSIAM AI rules to detect risks and misconfigurations across your AI ecosystem. - [Create an attack path (legacy) rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/create-an-attack-path-rule.md): Create Cortex XSIAM attack path rules that identify breach paths to high-value cloud assets. - [View cloud security rule status](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/view-cloud-security-rule-status.md): View, filter, and sort the status of cloud security rules in Cortex XSIAM. - [Edit a cloud security rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/edit-a-cloud-security-rule.md): Edit cloud security rules in Cortex XSIAM and understand how changes affect related issues. - [Enable or disable a rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/enable-or-disable-a-rule.md): Enable or disable cloud security rules in Cortex XSIAM to control when they evaluate assets. - [Use an existing rule to create a new one](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/use-an-existing-rule-to-create-a-new-one.md): Duplicate an existing cloud security rule in Cortex XSIAM and customize it for your needs. - [Delete a custom cloud security rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-rules/delete-a-custom-cloud-security-rule.md): Delete custom cloud security rules in Cortex XSIAM that are no longer needed. - [Create and manage cloud security policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies.md): Create and manage cloud security policies in Cortex XSIAM. - [Create a cloud security policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/create-a-cloud-security-policy.md): Create a cloud security policy in Cortex XSIAM that applies security rules to selected cloud assets. - [Edit a cloud security policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/edit-a-cloud-security-policy.md): Edit cloud security policies in Cortex XSIAM to update their details, rules, and scopes. - [Enable or disable a policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/enable-or-disable-a-policy.md): Enable or disable custom and default cloud security policies in Cortex XSIAM. - [Use an existing policy to create a new one](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/use-an-existing-policy-to-create-a-new-one.md): Clone an existing cloud security policy in Cortex XSIAM and tailor it to your needs. - [Delete a custom cloud security policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-security-rules-and-policies/create-and-manage-cloud-security-policies/delete-a-custom-cloud-security-policy.md): Remove custom cloud security policies in Cortex XSIAM that are no longer needed. - [Cloud workload policies and rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules.md): Use Cortex XSIAM cloud workload policies and rules to detect security violations, create issues, and prevent misconfigurations. - [How policies and rules work together](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/how-policies-and-rules-work-together.md): Understand how Cortex XSIAM cloud workload rules detect violations and policies create issues or apply preventive actions. - [Cloud workload policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies.md): Configure Cortex XSIAM cloud workload policies to detect violations, create issues, and prevent risks across SDLC stages. - [Types of cloud workload policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies.md): Explore Cortex XSIAM cloud workload policy types for misconfigurations, malware, secrets, and trusted images. - [Trusted image cloud workload policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/types-of-cloud-workload-policies/types-of-cloud-workload-policies.md): Configure Cortex XSIAM trusted image policies to evaluate image trust, prevent untrusted deployments, and create security issues. - [Cloud Workload Policies page](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-policies-page.md): Use the Cortex XSIAM Cloud Workload Policies page to view, filter, configure, and manage workload security policies. - [Enable or disable a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/enable-or-disable-a-cloud-workload-policy.md): Enable or disable a Cortex XSIAM cloud workload policy to control its evaluation and enforcement. - [Create a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/create-a-cloud-workload-policy.md): Create Cortex XSIAM cloud workload policies for misconfiguration, malware, secret, and trusted image protection. - [Use an existing policy to create a new cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/use-an-existing-policy-to-create-a-new-cloud-workload-policy.md): Duplicate an existing Cortex XSIAM cloud workload policy to reuse and modify its conditions, scope, and actions. - [Edit a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/edit-a-cloud-workload-policy.md): Edit a Cortex XSIAM cloud workload policy to update its configuration and security enforcement settings. - [Delete a cloud workload policy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/delete-a-cloud-workload-policy.md): Delete a Cortex XSIAM cloud workload policy that is no longer needed for workload security. - [Cloud workload preventive action](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-policies/cloud-workload-preventive-action.md): Learn how Cortex XSIAM cloud workload preventive actions block Kubernetes deployments and fail CI pipelines. - [Cloud workload rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules.md): Use Cortex XSIAM cloud workload rules to define detection criteria for security violations and policy enforcement. - [Default (pre-defined) rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/default-pre-defined-rules.md): Review Cortex XSIAM predefined cloud workload rules that detect risks, prevent violations, and create issues. - [Custom (user-defined) rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/custom-user-defined-rules.md): Create Cortex XSIAM custom cloud workload rules for organization-specific security, compliance, and misconfiguration checks. - [Cloud Workload Rules page](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/cloud-workload-rules-page.md): Use the Cortex XSIAM Cloud Workload Rules page to view, filter, and manage built-in and custom rules. - [Create a new custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/create-a-new-custom-detection-rule.md): Create Cortex XSIAM custom cloud workload detection rules using agentless, Kubernetes, or XDR Agent scanners. - [Use an existing rule to create a new custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/use-an-existing-rule-to-create-a-new-custom-detection-rule.md): Duplicate an existing Cortex XSIAM cloud workload rule to create and customize a new detection rule. - [Edit a custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/edit-a-custom-detection-rule.md): Edit a Cortex XSIAM custom cloud workload detection rule to update its security and compliance checks. - [Delete a custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/cloud-workload-policies-and-rules/cloud-workload-rules/delete-a-custom-detection-rule.md): Delete a Cortex XSIAM custom cloud workload detection rule that is no longer required. - [Base image rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/base-images-rule.md): Use Cortex XSIAM base image rules to map container image lineage, trace vulnerabilities, and manage approved foundational images. - [Create a base image rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/base-images-rule/create-a-base-images-rule.md): Create and manage Cortex XSIAM base image rules for scanned registry images, including filters, previews, and rule updates. - [Find the base image for an asset](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/rules-and-policies/base-images-rule/prerequisites.md): Find a container asset's base image in Cortex XSIAM to inspect registry image details and upstream or downstream lineage. - [Monitor and track compliance adherence](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence.md): Evaluate and track Cortex XSIAM asset compliance against industry standards and organizational policies. - [Choose compliance standards from the compliance catalog](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog.md): Select built-in or custom compliance standards and controls from the compliance catalogs in Cortex XSIAM. - [Standards catalog](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/standards-catalog.md): Browse available compliance standards in Cortex XSIAM. - [Use a built-in or custom standard](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-standard.md): Use built-in standards or create and edit custom standards in Cortex XSIAM. - [Use a built-in or custom control](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/use-a-built-in-or-custom-control.md): Add built-in controls or create and manage custom controls for custom standards in Cortex XSIAM. - [Create a new custom detection rule](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/choose-compliance-standards-from-the-compliance-catalog/create-a-new-custom-detection-rule.md): Create custom Cortex XSIAM detection rules to enforce compliance requirements and security best practices. - [Use an assessment profile to run compliance checks on your assets](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/use-an-assessment-profile-to-run-compliance-checks-on-your-assets.md): Create assessment profiles to evaluate selected asset groups against compliance standards in Cortex XSIAM. - [View and manage compliance assessments and reports](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports.md): Review Cortex XSIAM assessment results and generate or schedule downloadable compliance reports. - [Review compliance assessments](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/assessments.md): View Cortex XSIAM assessment results and drill into control, rule, and asset compliance details. - [Review compliance reports](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/view-and-manage-compliance-assessments-and-reports/reports.md): View, export, and manage historical Cortex XSIAM compliance assessment reports. - [Compliance Overview Dashboard](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/monitor-and-track-compliance-adherence/compliance-overview-dashboard.md): Monitor organization-wide Cortex XSIAM compliance scores, standards, failed controls, and asset group performance. - [Cloud Data Classification](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification.md): Manage data patterns, profiles, OCR, and masked sample collection for cloud data classification in Cortex XSIAM. - [How to create and validate a custom data pattern](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern.md): Create and validate custom data patterns in Cortex XSIAM. - [Custom data patterns: Guardrails and syntax guide](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-pattern/custom-data-patterns-guardrails-and-syntax-guide.md): Follow guardrails and syntax requirements for custom data patterns in Cortex XSIAM. - [How to disable and enable data patterns in Data Classification](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-disable-and-enable-data-patterns-in-data-classification.md): Enable or disable data patterns in Cortex XSIAM Data Classification. - [How to create and validate a custom data profile](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-create-and-validate-a-custom-data-profile.md): Create and validate custom data profiles in Cortex XSIAM. - [How to disable and enable data profiles in Cloud Data Classification](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-disable-and-enable-data-profiles-in-cortex-cloud-data-classification.md): Enable or disable data profiles in Cortex XSIAM Data Classification. - [How to report a false positive in Cloud Data Classification](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification/how-to-report-a-false-positive-in-cortex-cloud-data-classification.md): Report false positives in Cortex XSIAM Data Classification. - [Topic classification](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-data-classification/topic-classification.md): Classify cloud data by topic in Cortex XSIAM. - [Cloud Identity Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security.md): Address cloud identity security challenges by managing identity risks and permissions in Cortex XSIAM. - [What is Cloud Identity Security?](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/what-is-cortex-cloud-identity-security.md): Learn how Cloud Identity Security in Cortex XSIAM secures cloud identities and permissions. - [Review and improve your Identity Security posture](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/review-and-improve-your-identity-security-posture.md): Learn how to review and improve your Identity Security posture in Cortex XSIAM. - [How does Effective Permission Calculation work?](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/how-does-effective-permission-calculation-work.md): An explanation of how Effective Permission Calculation works in Cloud Identity Security. - [Cloud Identity Security functionality](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/cortex-cloud-identity-security-functionality.md): Explore Cloud Identity Security functionality in Cortex XSIAM. - [Configure Cloud Identity Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/configure-cortex-cloud-identity-security.md): Configure Cloud Identity Security settings in Cortex XSIAM. - [Unified Human Identities](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/unified-human-identities.md): Learn how Unified Human Identities correlate accounts in Cortex XSIAM. - [Achieve the principle of least privilege access](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/achieve-the-principle-of-least-privilege-access.md): Use Cloud Identity Security in Cortex XSIAM to achieve least privilege access. - [Explore permissions using the simple and advanced access tables](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/explore-permissions-using-the-simple-and-advanced-access-tables.md): Explore permissions with the Simple and Advanced access tables in Cortex XSIAM. - [Create a custom detection rule in Cloud Identity Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/create-a-custom-detection-rule-in-cortex-cloud-identity-security.md): Create custom Cloud Identity Security detection rules in Cortex XSIAM. - [Perform advanced Identity Security investigations using XQL](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/perform-advanced-identity-security-investigations-using-xql.md): Use XQL in Cortex XSIAM to investigate Cloud Identity Security permissions, identity risks, and access data. - [Ingest logs and data from Okta](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/ingest-logs-and-data-from-okta.md): Ingest Okta logs and configuration data into Cortex XSIAM. - [Enable inactive human identity logs on Azure in Cloud Identity Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/enable-inactive-human-identity-logs-on-azure-in-cortex-cloud-identity-security.md): Enable Azure inactive human identity logs for Cloud Identity Security in Cortex XSIAM. - [Manage RBAC and SBAC in Cloud Identity Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-identity-security/manage-rbac-and-sbac-in-cortex-cloud-identity-security.md): Manage RBAC and SBAC for Cloud Identity Security in Cortex XSIAM. - [Network exposure detection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/network-exposure-detection.md): Discover how to identify, prioritize, and remediate internet, outbound, and lateral network exposure risks in Cortex XSIAM. - [What is Cloud Network Analyzer?](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/network-exposure-detection/what-is-cloud-network-analyzer.md): Learn how Cloud Network Analyzer in Cortex XSIAM identifies internet, outbound, and lateral exposure risks across cloud accounts. - [Internet exposure detection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/network-exposure-detection/internet-exposure-detection.md): Learn how to detect publicly exposed cloud assets in Cortex XSIAM and validate internet exposure through external network scanning. - [Outbound exposure detection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/network-exposure-detection/outbound-exposure-detection.md): Learn how to detect cloud workloads with unrestricted outbound internet access in Cortex XSIAM and identify responsible security controls. - [East-west exposure detection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/network-exposure-detection/east-west-exposure-detection.md): Learn how to identify cloud workloads with unrestricted lateral access in Cortex XSIAM and the controls creating east-west exposure. - [Investigate an internet exposure](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/network-exposure-detection/investigate-an-internet-exposure.md): Investigate internet-exposed cloud assets in Cortex XSIAM using Issues and Graph Search to prioritize and remediate risk. - [Configure trusted IPs](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/network-exposure-detection/configure-trusted-ips.md): Configure trusted public IP ranges in Cortex XSIAM to exclude approved addresses from Cloud Network Analyzer internet exposure evaluations. - [Cortex Cloud SaaS Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security.md): Discover continuous SaaS visibility and control in Cortex XSIAM across identities, connected applications, and AI agents. - [Setup SaaS Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/setup-saas-security.md): Get started with SaaS Security in Cortex XSIAM. - [Connect a SaaS application](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application.md): Connect supported SaaS applications in Cortex XSIAM to track misconfigurations and compliance violations. - [Onboard Asana](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-asana.md): Connect an Asana instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Atlassian](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-atlassian.md): Connect an Atlassian instance in Cortex XSIAM to detect posture and compliance risks. - [Onboard Automox](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-automox.md): Connect an Automox instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Businessmap](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-businessmap.md): Connect a Businessmap instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Celonis](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-celonis.md): Connect a Celonis instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Cisco Duo](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-cisco-duo.md): Connect a Cisco Duo instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Cisco Meraki](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-cisco-meraki.md): Connect a Cisco Meraki instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard ClickUp](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-clickup.md): Connect a ClickUp instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Contentful](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-contentful.md): Connect a Contentful instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Couchbase](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-couchbase.md): Connect a Couchbase instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Coveo](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-coveo.md): Connect a Coveo instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Databricks](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-databricks.md): Connect a Databricks instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Datadog](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-datadog.md): Connect a Datadog instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Gainsight PX](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-gainsight-px.md): Connect a Gainsight PX instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Grammarly](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-grammarly.md): Connect a Grammarly instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Harness](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-harness.md): Connect a Harness instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Intercom](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-intercom.md): Connect an Intercom instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Jamf Pro](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-jamf-pro.md): Connect a Jamf Pro instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard JumpCloud](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-jumpcloud.md): Connect a JumpCloud instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Kustomer](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-kustomer.md): Connect a Kustomer instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Microsoft Entra ID](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-microsoft-entra-id.md): Connect a Microsoft Entra ID instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Monday.com](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-monday.com.md): Connect a Monday.com instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard MongoDB Atlas](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-mongodb-atlas.md): Connect a MongoDB Atlas instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard MuleSoft](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-mulesoft.md): Connect a MuleSoft instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Mural](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-mural.md): Connect a Mural instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Office 365](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-office-365.md): Connect an Office 365 instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Okta](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-okta.md): Connect an Okta instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard PagerDuty](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-pagerduty.md): Connect a PagerDuty instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Redis Labs](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-redis-labs.md): Connect a Redis Labs instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Salesforce](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-salesforce.md): Connect a Salesforce instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard SAP Ariba](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-sap-ariba.md): Connect an SAP Ariba instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Sentry](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-sentry.md): Connect a Sentry instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard ServiceNow](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-servicenow.md): Connect a ServiceNow instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Shopify](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-shopify.md): Connect a Shopify instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Slack Enterprise](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-slack-enterprise.md): Connect a Slack instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Sumo Logic](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-sumo-logic.md): Connect a Sumo Logic instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Workday](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-workday.md): Connect a Workday instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard Wrike](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-wrike.md): Connect a Wrike instance in Cortex XSIAM to detect posture risks and compliance violations. - [Onboard YouTrack](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/connect-a-saas-application/onboard-youtrack.md): Connect a YouTrack instance in Cortex XSIAM to detect posture risks and compliance violations. - [SaaS Security Overview](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-security-overview.md): Use the SaaS Security Overview in Cortex XSIAM to monitor posture, identity, data, and AI agent security. - [SaaS Security Checks](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-security-checks.md): Use SaaS Security Checks in Cortex XSIAM to identify at-risk assets and prioritize remediation. - [Provider Instances Security Check](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/provider-instances-security-check.md): Use Provider Instances Security Check in Cortex XSIAM to assess security posture across application instances. - [Detection Rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/detection-rules.md): View Cloud Security Posture Rules in Cortex XSIAM to detect SaaS application risks. - [Remediation Actions](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/remediation-actions.md): Use remediation actions in Cortex XSIAM to resolve SaaS Security issues. - [Create and monitor tickets](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/create-and-monitor-tickets.md): Create and monitor synced tickets in Cortex XSIAM to remediate SaaS Security issues. - [SaaS AI Agent Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security.md): Use SaaS AI Agent Security in Cortex XSIAM to secure enterprise SaaS AI agents. - [Setup SaaS Security for AISPM](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/setup-saas-security-for-aispm.md): Get started with SaaS AI Agent Security in Cortex XSIAM. - [Onboard SaaS AI Agents](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents.md): Learn how to onboard supported SaaS AI agents in Cortex XSIAM. - [Onboard Atlassian Rovo](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-atlassian-rovo.md): Connect Atlassian Rovo in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Onboard Box AI Agents](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-box-ai-agents.md): Connect Box AI Agents in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Onboard ChatGPT Enterprise](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-chatgpt-enterprise.md): Connect ChatGPT Enterprise in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Onboard Cursor Enterprise](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-cursor-enterprise.md): Connect Cursor Enterprise in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Onboard Gemini Enterprise](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-gemini-enterprise.md): Connect Gemini Enterprise in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Onboard M365 Copilot](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-m365-copilot.md): Connect M365 Copilot in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Onboard Microsoft Copilot Studio](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-microsoft-copilot-studio.md): Connect Microsoft Copilot Studio in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Onboard Service Now](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/onboard-saas-ai-agents/onboard-service-now.md): Connect ServiceNow in Cortex XSIAM SaaS Agent Security for visibility and control across your AI ecosystem. - [Manage SaaS AI Agents](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents.md): Manage SaaS AI agents in Cortex XSIAM, including agents, datasets, and connected tools. - [View AI Agents](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-ai-agents.md): View SaaS AI agents in Cortex XSIAM to assess their security context. - [View Datasets](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-datasets.md): View inference datasets in Cortex XSIAM SaaS AI Agent Security. - [View Agent Tools](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-saas-security/saas-ai-agent-security/manage-saas-ai-agents/view-agent-tools.md): View tools connected to SaaS AI agents in Cortex XSIAM. - [Cortex Cloud AI Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security.md): Explore Cloud AI Security in Cortex XSIAM for AI asset discovery, risk detection, and security investigations. - [What is Cortex Cloud AI Security?](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/what-is-cortex-cloud-ai-security.md): Learn how Cloud AI Security in Cortex XSIAM discovers AI assets, assesses risks, and supports remediation. - [Supported services in Cortex Cloud AI Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/supported-services-in-cortex-cloud-ai-security.md): Review platforms and services supported by AI Security in Cortex XSIAM. - [Cortex Cloud AI Security concepts](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-ai-security-concepts.md): Learn Cloud AI Security concepts in Cortex XSIAM, including AI assets, risks, and findings. - [Cortex Cloud AI Security use cases](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/cortex-cloud-ai-security-use-cases.md): Explore Cloud AI Security use cases in Cortex XSIAM for discovering, assessing, and securing AI systems. - [How to perform advanced AI Security investigations using XQL](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-ai-security/how-to-perform-advanced-ai-security-investigations-using-xql.md): Use XQL in Cortex XSIAM to investigate Cloud AI Security datasets and findings. - [Serverless function posture security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security.md): Cortex XSIAM scans AWS, GCP, and Azure serverless functions for vulnerabilities, malware, and exposed secrets. - [Onboard cloud providers for serverless functions](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/onboard-cloud-providers-for-serverless-functions.md): Connect cloud provider accounts to scan serverless functions for security vulnerabilities, malware, and exposed secrets in Cortex XSIAM. - [Serverless function posture rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules.md): Create and manage custom posture rules to identify attack paths, configuration issues, and network exposure in serverless functions in Cortex XSIAM. - [Manage serverless function rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/manage-serverless-function-rules.md): Manage, edit, and clone serverless function security rules in Cortex XSIAM. - [Create serverless function rules](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-serverless-function-rules.md): Create attack path, configuration, and network exposure rules in Cortex XSIAM. - [Create an attack path rule for serverless functions](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-an-attack-path-rule-for-serverless-functions.md): Create serverless function attack path rules to identify connected risks in Cortex XSIAM. - [Create a configuration rule for serverless functions](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-a-configuration-rule-for-serverless-functions.md): Create serverless function configuration rules to detect misconfigurations in Cortex XSIAM. - [Create a network exposure rule for serverless functions](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-rules/create-a-network-exposure-rule-for-serverless-functions.md): Create serverless function network exposure rules to find internet access in Cortex XSIAM. - [Serverless function posture policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-policies.md): Create and manage serverless function posture policies to detect threats and drive remediation in Cortex XSIAM. - [Manage serverless function policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-policies/manage-serverless-function-policies.md): Manage serverless function policies, scopes, and response actions in Cortex XSIAM. - [Create serverless function policies](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-posture-policies/create-serverless-function-policies.md): Create serverless function policies with rules and cloud account scopes in Cortex XSIAM. - [Serverless function usage](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/serverless-function-posture-security/serverless-function-usage.md): Manage serverless function assets, vulnerabilities, findings, and scan health in Cortex XSIAM. - [Cortex Cloud Application Security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/cortex-cloud-application-security.md): Discover Cortex XSIAM Application Security for ASPM, supply chain security, and code security. - [Registry scanning](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning.md): Connect and scan cloud and third-party container registries in Cortex XSIAM to identify image vulnerabilities, malware, exposed secrets, and policy violations. - [Supported container registry integrations](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning/supported-container-registry-integrations.md): Learn about supported container registry integrations in Cortex XSIAM - [How Container Registry Scanning Works](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning/how-container-registry-scanning-works.md): Learn how Cortex XSIAM discovers, scans, and evaluates container images in onboarded registries to identify and continuously monitor security risks. - [Scan re-evaluation process](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning/how-container-registry-scanning-works/scan-re-evaluation-process.md): Understand how Cortex XSIAM re-evaluates container registry scan results. - [Configure registry scanning for cloud accounts](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning/configure-registry-scanning-for-cloud-accounts.md): Configure Cortex XSIAM to scan container registries in connected cloud accounts. - [Modify the container registry scanning scope](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning/configure-registry-scanning-for-cloud-accounts/modify-the-container-registry-scanning-scope.md): Modify the Cortex XSIAM container registry scanning scope for cloud accounts and registries. - [Configure registry scanning for third party integrations](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning/configure-registry-scanning-for-third-party-integrations.md): Learn how to configure Cortex XSIAM to scan container registries in third-party integrations - [Manage registry scanning with APIs](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/container-registry-scanning/manage-registry-scanning-with-apis.md): Learn how to onboard and manage registry scanning programatically with APIs for Cortex XSIAM. - [Web and API Security (WAAS)](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview.md): Use Cortex XSIAM Web and API Security (WAAS) to discover, assess, monitor, and protect APIs and web workloads. - [Personas workflow](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/personas-workflow.md): Cortex XSIAM API security responsibilities and workflows for SOC analysts, security practitioners, and workload owners. - [Secure your API landscape](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape.md): Secure APIs in Cortex XSIAM through gateway integration, risk assessment, threat monitoring, specification validation, and workload protection. - [Gain visibility and assess risk of API endpoints](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/gain-visibility-and-assess-risk-of-api-endpoints.md): Use Cortex XSIAM to discover API endpoints, inspect traffic, assess risks, and investigate API security findings. - [Monitor and investigate API threats](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/monitor-and-investigate-api-threats.md): Monitor, investigate, and respond to API attacks, threats, and security issues in Cortex XSIAM. - [Configure API security from end to end](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end.md): Configure Cortex XSIAM API security with gateway integrations, traffic collection, and agent-based protection policies. - [Ingest AWS API Gateway](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-aws-api-gateway.md): Ingest AWS API Gateway logs into Cortex XSIAM for API traffic analysis, threat detection, and risk assessment. - [Ingest Azure APIM](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-azure-apim.md): Ingest Azure API Management traffic into Cortex XSIAM for API security analysis, risk assessment, and threat detection. - [Ingest Apigee Proxy](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-apigee-proxy.md): Configure Apigee Proxy traffic ingestion into Cortex XSIAM for API security analysis and threat detection. - [Ingest Kong](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-kong.md): Configure Kong API gateway traffic ingestion into Cortex XSIAM for API security analysis and threat detection. - [Ingest F5](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/ingest-f5.md): Configure F5 BIG-IP LTM traffic ingestion into Cortex XSIAM for API security analysis and threat detection. - [Agent-based protection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection.md): Use Cortex XSIAM agent-based Web and API Security profiles to monitor or block threats on Linux workloads. - [Set up Web and API Security profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/set-up-web-and-api-security-profiles.md): Configure Cortex XSIAM Web and API Security profiles to detect, report, or block threats on Linux workloads. - [Apply Web and API Security profiles to workloads](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/apply-web-and-api-security-profiles-to-workloads.md): Apply Cortex XSIAM Web and API Security profiles through prevention policies for selected workloads and workload groups. - [Manage Web and API Security prevention profiles](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/manage-web-and-api-security-prevention-profiles.md): Manage Cortex XSIAM Web and API Security prevention profiles, including policy usage, editing, exporting, and deletion. - [Add a disable prevention rule for cloud workloads](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/add-a-disable-prevention-rule-for-cloud-workloads.md): Create Cortex XSIAM Web and API Security rules that disable selected prevention actions for cloud workloads. - [Add a support exception rule for cloud workloads](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/add-a-support-exception-rule-for-cloud-workloads.md): Import Cortex XSIAM support exception rules for Web and API Security protection on cloud workloads. - [Add a legacy exception rule for cloud workloads](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/add-a-legacy-exception-rule-for-cloud-workloads.md): Create legacy Cortex XSIAM Web and API Security exception rules for prevention modules on cloud workloads. - [Additional workload management tasks](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/configure-api-security-from-end-to-end/agent-based-protection/additional-workload-management-tasks.md): Manage Cortex XSIAM workloads and workload groups for Web and API Security protection and related endpoint tasks. - [API specification inventory](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview/secure-your-api-landscape/api-specification-inventory.md): Use Cortex XSIAM API specification inventory to import, validate, scan, and assess OpenAPI specifications. - [Serverless function runtime security](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview-1.md): Cortex XSIAM serverless function runtime security: monitor AWS function activity, enforce policies, and investigate violations. - [Set up serverless function protection](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview-1/set-up-serverless-function-protection.md): Set up Cortex XSIAM serverless function protection with restriction profiles, policy rules, and agent packages. - [Serverless runtime issues](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security/overview-1/serverless-runtime-issues.md): Investigate Cortex XSIAM serverless runtime issues from process, network, and filesystem policy violations. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/cloud-security.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.