Cortex XSOAR architecture

Explore the architecture of Cortex XSOAR 8.13 On-prem.

The following diagram describes the high-level architecture for Cortex XSOAR:

Cortex XSOAR installation is implemented by your IT team or Cortex XSOAR administrators. Cortex XSOAR uses the following:

• Relational store using MySQL

• Cache and synchronization using Redis

• Data warehousing using Elasticsearch

Cortex XSOAR is provided as a Kubernetes cluster, a set of nodes (VMs) that run containerized applications that package Cortex XSOAR, its dependencies, and some necessary services. You can decide how many nodes/VMs to include in the cluster when running the Administrative tool. You can decide between a standalone environment (one node) or a multi-node cluster (three nodes).

Playbooks are executed on dedicated, isolated workers, and workloads do not share compute resources.