> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.9/configure-cortex-xsoar/marketplace/cortex-marketplace.md).

# Cortex Marketplace

Cortex XSOAR Marketplace is the premier digital storefront for discovering, exchanging, and contributing security automation playbooks, built into Cortex XSOAR. Cortex XSOAR content packs are prebuilt bundles of integrations, playbooks, dashboards, fields, subscription services, and all the dependencies needed to support specific security orchestration use cases.

Marketplace enables you to:

* **Leverage content from the largest SOAR community:** Continuously extend Cortex XSOAR with proven use cases contributed by SecOps users and SOAR partners.
* **Discover top-rated, validated content:** Identify the content offerings recommended by your peers and validated by the world’s leading cybersecurity company. Discover how to increase automation with the tools that you already have.
* **Solve your toughest security use cases:** Deploy turnkey security workflows that span integrations, playbooks, dashboard layouts, and reports with a single click.

Marketplace enables you to build a strong community with other security professionals by exchanging content. You can explore the latest trends from Cortex XSOAR and other contributors and test drive use cases all within your Cortex XSOAR platform.

Cortex XSOAR supports free content packs, which are either Cortex XSOAR, or partner-supported content packs. You can restrict a user role from managing content packs in Marketplace when defining/editing user roles.

In Marketplace, you can browse all content packs (including installed content), or view only installed content packs.

You can search for content packs by entering text in the search bar and selecting the relevant content pack from the search results.

You can sort content packs by latest update, best match, recommended, number of downloads, and filter according to the following criteria:

* **Use cases:** Filter according to high-level use cases, such as Phishing, Malware, Ransomware, Access.
* **Integrations:** Filter according to the integration included in the content pack.
* **Categories:** Filter according to content pack categories, such as Messaging, and Forensics & Malware Analysis
* **Published:** Filter according to whether published by Cortex XSOAR or by Cortex XSOAR technology partners.
* **General:**
  * **Certified:** Created and supported by a user and certified by Cortex XSOAR. Cortex XSOAR has tested the content to ensure that it meets standards and works correctly.
  * **Support:** Supported by either Cortex XSOAR or a partner-supported content pack.
  * **Uses my integrations:** Content packs that use integrations that you have added instances for (whether or not they are enabled).
* **Content Pack Includes:** Filter according to the content of the content pack, such as scripts, Integrations, and Playbooks.
* **Tags:** Filter according to tags, such as Alerts, Network, and Security.
* **Types:** Filter according to Collection or TIM.

When clicking a content pack you can view detailed information including content that it installs (such as scripts and playbooks, and indicator fields), dependencies (what content packs are required or optional) and version history (including whether you want to roll back to earlier versions).

You can view Marketplace content packs from within Cortex XSOAR or at <https://cortex.marketplace.pan.dev/marketplace/>.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.9/configure-cortex-xsoar/marketplace/cortex-marketplace.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
