Ironscales

Use Ironscales data with Cortex XSIAM.

Important

This connector is only available for tenants that onboarded after July 26, 2026. For tenants that onboarded before this date, use Marketplace to access the standalone integration. For more information, see Marketplace.

This connector is available with any active Cortex XSIAM license.

IRONSCALES is an AI-powered email security platform that detects, remediates, and prevents phishing and BEC attacks while training users through integrated awareness tools. Use this connector to collect Ironscales email security event log messages, including XDM mapping for key event types.

This connector includes the following sub-capabilities (Marketplace integrations link to PAN DEV for more information):

• Ironscales Event Collector: Use this integration to fetch email security incidents from Ironscales as XSIAM events.

To configure this connector, follow the steps outlined in the configuration wizard.