> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-command-center.md).
# Cortex Command Center
The Cortex Command Center is a unified view for complete asset visibility, providing full organizational visibility across your cloud and enterprise environments. By combining cloud security data with SOC insights, the Cortex Command Center offers a detailed view of cloud and enterprise assets, including asset risk levels and active threats to assets.
Because this is a system-provided dashboard, it is **Public** by default and visible to all authorized users. It cannot be edited, deleted, or have its ownership transferred.
This dashboard helps you gain key insights into your environment, including:
* **A complete overview of your assets:** Understand asset distribution across your organization, with a comprehensive breakdown of assets by class, provider, and region.
* **Assets at risk due to posture issues:** Identify assets with open posture issues that require attention to prevent threats from occurring in your environment.
Posture issues are associated with risk management activities to detect and mitigate risks to assets in the environment before they occur in runtime, and improve resilience. For example, misconfigurations in cloud instances, over-permissive users, or the detection of secrets or shadow data.
* **Assets with active runtime threats:** Identify assets with open security issues that require immediate attention.
Security issues are associated with case response activities for detecting, preventing, and blocking threats as they occur in runtime. For example, identification of malware in a file, a compromised endpoint, or a phishing attempt.
* **Assets with active threats and posture issues:** Highlight assets with open security and posture issues. These are assets with active threats that might have already been exploited, and require immediate attention.
* **Data Ingestion in your environment:** See the total amount of ingested data in your environment over the last 24 hours, with a breakdown by data source. Click the widget to see a full breakdown on the **Data Ingestion** dashboard.
Show me more
When you access the **Cortex Command Center**, the dashboard displays a view of all monitored assets. On the left side of the dashboard, you can see the total number of monitored assets, and a breakdown by status. On the right side, the radar provides a visual representation of your assets. The data on this dashboard shows the current status of your environment and is updated every 20 minutes. You can take the following actions to investigate your assets:
* **Refine the displayed data:** Use the severity filters in the top-right corner. By default, assets with High and Critical issues are displayed. You can also change the radar view to display data by asset class, provider, or region, and drill down on assets by status: assets with active threats, assets at risk from posture issues, and assets with both active threats and posture issues.
Drill down further on an asset class, provider, or region by clicking on the radar to open a side view with a breakdown of the selected option.
* **Identify unprotected assets:** Filter by asset class **Compute** to see the number of Compute assets that are being protected by the Cortex Agent. This information can help you to identify unprotected assets, and ensure complete coverage in your environment. Click on the number of agents to see more information on the **Agent Management** dashboard.
* **Investigate open issues for an asset type:** Click a group (such as Identity) to see the number of open issues for each asset status. Click on the number of issues to open the Issues page, filtered for the asset type and status.
* **See asset details:** On the radar, each dot represents a group of assets, color-coded by their collective status. Click a dot to view details about the assets in the group. Use the arrows to click through the assets, click See details to open the asset card for a specific asset or click **See All** to open the **Asset Inventory**, filtered to display all assets in the group.
### Limitations
The **Cortex Command Center** currently has the following limitations:
* Only assets that are included in the **Asset Inventory** are displayed on the dashboard.
* In the region view, the location is based on cloud provider region and its data center location and therefore the map view shows only cloud assets.
* When you click **See All** assets in the **Asset Inventory**, the listed assets are limited to 1,000.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/detect-investigate-and-respond-to-threats/monitor-dashboards-and-reports/dashboard-reference/command-center-reference/cortex-command-center.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.