Skip to main content
docsignal
Data
Docs
Track a custom list
Palo Alto Networks product updates
paloaltonetworks.com
Latest activity
Date
Area / Type
Change
Product
Source
Shipped
2026-09-30
analytics-reporting
feature removed
Prisma Access incidents dashboard to be retired September 30, 2026
Strata Cloud Manager
docs
Last 10 weeks
By product and area
Cortex XSIAM
api-platform
████████
13
Cortex XSIAM
threat-defense
███████
12
Cortex XDR 5.x
security-compliance
██████
10
Cortex XDR Content Updates
threat-defense
██████
9
Cortex XDR 5.x
deployment-topology
████
6
Cortex Analytics Content
threat-defense
███
5
Cortex XSIAM
deployment-topology
███
5
Cortex XSIAM
security-compliance
███
5
PAN-OS
network-transport
███
5
Cortex XDR 5.x
api-platform
██
4
Cortex XSIAM
integrations-ecosystem
██
4
Next-Generation Firewall
network-transport
██
4
Prisma Access
threat-defense
██
4
Prisma Access Browser
security-compliance
██
4
Prisma Agent
network-transport
██
4
Prisma Agent
security-compliance
██
4
Strata Cloud Manager
analytics-reporting
██
4
Strata Logging Service
analytics-reporting
██
4
Cortex Cloud Posture Management
security-compliance
██
3
Cortex Cloud Posture Management
threat-defense
██
3
Cortex Data Security
deployment-topology
██
3
Cortex XDR 5.x
integrations-ecosystem
██
3
Cortex XDR 5.x
threat-defense
██
3
Prisma Access Browser
threat-defense
██
3
Prisma Agent
mobile-desktop
██
3
VM-Series
analytics-reporting
██
3
Cortex Cloud Posture Management
ai-assist
█
2
Cortex Cloud Posture Management
integrations-ecosystem
█
2
Cortex Cloud Runtime Security
ai-assist
█
2
Cortex Cloud Runtime Security
threat-defense
█
2
Cortex Data Security
permissions-governance
█
2
Cortex XDR 5.x
fleet-management
█
2
Cortex XDR Agent
network-transport
█
2
Cortex XSIAM
ai-agents
█
2
Cortex XSIAM
billing-administration
█
2
Cortex XSIAM
performance-scale
█
2
Cortex XSIAM
search-retrieval
█
2
Cross-product
permissions-governance
█
2
Cross-product
workflow-automation
█
2
Enterprise DLP
mobile-desktop
█
2
Next-Generation Firewall
deployment-topology
█
2
Next-Generation Firewall
security-compliance
█
2
PAN-OS
threat-defense
█
2
PAN-OS
unmapped
█
2
Prisma Access
performance-scale
█
2
Advanced WildFire
performance-scale
█
1
Cloud NGFW for AWS
performance-scale
█
1
Cloud NGFW for AWS
threat-defense
█
1
Cortex AgentiX
ai-agents
█
1
Cortex AgentiX
billing-administration
█
1
Cortex Cloud Application Security
analytics-reporting
█
1
Cortex Cloud Application Security
integrations-ecosystem
█
1
Cortex Cloud Posture Management
billing-administration
█
1
Cortex Cloud Posture Management
deployment-topology
█
1
Cortex Cloud Posture Management
performance-scale
█
1
Cortex Cloud Posture Management
permissions-governance
█
1
Cortex Cloud Posture Management
search-retrieval
█
1
Cortex Cloud Runtime Security
ai-agents
█
1
Cortex Cloud Runtime Security
api-platform
█
1
Cortex Cloud Runtime Security
deployment-topology
█
1
Cortex Cloud Runtime Security
integrations-ecosystem
█
1
Cortex Cloud Runtime Security
security-compliance
█
1
Cortex Data Security
security-compliance
█
1
Cortex Data Security
threat-defense
█
1
Cortex XDR 3.x
data-import-export
█
1
Cortex XDR 3.x
deployment-topology
█
1
Cortex XDR 3.x
fleet-management
█
1
Cortex XDR 3.x
integrations-ecosystem
█
1
Cortex XDR 3.x
performance-scale
█
1
Cortex XDR 3.x
threat-defense
█
1
Cortex XDR 5.x
ai-assist
█
1
Cortex XDR 5.x
billing-administration
█
1
Cortex XDR 5.x
performance-scale
█
1
Cortex XDR 5.x
permissions-governance
█
1
Cortex XDR Agent
integrations-ecosystem
█
1
Cortex XSIAM
analytics-reporting
█
1
Cortex XSIAM
data-import-export
█
1
Cortex XSIAM
permissions-governance
█
1
Cortex XSOAR 8 (on-prem)
data-import-export
█
1
Cortex XSOAR 8 (on-prem)
unmapped
█
1
Cross-product
billing-administration
█
1
Cross-product
fleet-management
█
1
Cross-product
threat-defense
█
1
DNS Security
performance-scale
█
1
Enterprise DLP
analytics-reporting
█
1
IoT / Device Security
analytics-reporting
█
1
IoT / Device Security
billing-administration
█
1
IoT / Device Security
integrations-ecosystem
█
1
IoT / Device Security
unmapped
█
1
Next-Generation Firewall
analytics-reporting
█
1
Next-Generation Firewall
permissions-governance
█
1
Next-Generation Firewall
threat-defense
█
1
PAN-OS
analytics-reporting
█
1
Panorama
api-platform
█
1
Panorama
deployment-topology
█
1
Panorama
fleet-management
█
1
Prisma Access
network-transport
█
1
Prisma Access
permissions-governance
█
1
Prisma Access Browser
api-platform
█
1
Prisma Access Browser
billing-administration
█
1
Prisma Access Browser
mobile-desktop
█
1
Prisma Access Browser
network-transport
█
1
Prisma Access Browser
permissions-governance
█
1
Prisma Agent
fleet-management
█
1
Prisma AIRS
integrations-ecosystem
█
1
SaaS Security
performance-scale
█
1
Strata Cloud Manager
billing-administration
█
1
Strata Cloud Manager
network-transport
█
1
Strata Logging Service
data-import-export
█
1
Strata Multitenant Cloud Manager
billing-administration
█
1
VM-Series
api-platform
█
1
VM-Series
data-import-export
█
1
VM-Series
network-transport
█
1
VM-Series
threat-defense
█
1
VM-Series
unmapped
█
1
Integrations
−
symantec-dlp
Prisma Browser drops the Symantec DLP file-scanning integration
2026-09-03
−
yazamtech
Prisma Browser drops the YazamTech SelectorIT file-scanning integration
2026-09-03
+
oracle-cloud-infrastructure
Prisma Access RBI Adds Oracle Cloud Infrastructure as a Deployment Platform
2026-09-04
Capabilities added
Strata Logging Service adds AI Access log type with documented field schemas
New log-reference pages document the AI Access log type, including the AI Conversation Log with per-format field mappings (syslog default order, CEF, EMAIL, HTTPS, LEEF). These logs record traffic between users and GenAI applications traversing Palo Alto security infrastructure, covering prompted content, AI-generated responses and policy enforcement actions.
Strata Logging Service adds AI Supply Chain Scan Event log type
New log-reference pages document the AI Supply Chain Scan Event log, recording security scan events for AI models pulled from model registries and storage systems (Hugging Face, S3, GCS, Azure, local, Artifactory, GitLab), with scan rule pass/fail counts, violations and model metadata exposed across all supported forwarding formats.
Strata Multitenant Cloud Manager adds PayGo postpaid billing and tenant lifecycle for MSPs
New documentation introduces a Pay-As-You-Go (PayGo) credit-based monthly postpaid licensing model for Prisma SASE in Strata Multitenant Cloud Manager, alongside the existing term activation flow. MSPs activate a PayGo SKU on the absolute root tenant, onboard child tenants with Prisma Browser Core, SASE SWG or SASE ENT packages, amend mobile-user quantities, remote-network site types and add-ons at any time (metered daily, billed monthly, with package minimums of 1/50/100 users), and deprovision tenants to stop metering with prorated final billing. Package and billing activity is monitored from the root via the Business dashboard's Tenant License Details.
Amazon S3 flow log collection adds Workload Federated Identity authentication
The Amazon S3 network flow log configuration now documents a Workload Federated Identity option alongside Access Key and Assumed Role: the customer configures an IAM role whose trust policy authorizes Cortex XSIAM's service account via OIDC, with the tenant copying the Cortex XSIAM service account identifier into the role trust policy and supplying the OIDC audience value.
VM-Series decryption port mirroring adds AWS support with IAM role configuration
The Decryption Administration docs expand decryption port mirroring: VM-Series firewalls now support decrypt mirror in AWS cloud environments in addition to ESXi and Azure. On AWS, an IAM role attached to the PA-VM must allow ec2:DescribeInstances, ec2:DescribeNetworkInterfaces and ec2:DescribeSubnets, and tested scenarios include a basic client-firewall-server topology plus AWS GWLB with VM-Series in single- and dual-ARM deployments. The registry had no row for this capability, so it is added here with the AWS support included; the previous text only covered ESXi and Azure tap interfaces.
Cortex XSIAM adds an Amazon ECS EC2 installer package for the Cortex XDR agent
Agent installation packages now include an Amazon ECS EC2 type for Linux: the package downloads as a JSON task definition deployed to ECS EC2-launch-type clusters as a Daemon service, requires Cortex XDR agent 9.1+ on x86_64 or ARM64, and licenses per node, with the console identifying container processes and reporting the endpoint type as Amazon ECS EC2.
Cortex XDR adds Amazon ECS EC2 agent installation packages
The agent installation documentation restructures its package types and adds a new Amazon ECS EC2 installer: the package downloads as a JSON task definition deployed to an ECS cluster with a Daemon service, licensing per node, and endpoint type 'Amazon ECS EC2' in the All Endpoints table. Standalone, Kubernetes, Helm, CaaS and Serverless package types remain. Corroborated by the onboarding installer docs page in the same diff.
Prisma Access 6.1 enforces strict source URL format for External Dynamic Lists used by Explicit Proxy
Starting with Prisma Access 6.1.0, Explicit Proxy configurations enforce a strict format for External Dynamic List (EDL) source URLs, including shared EDLs and EDLs scoped to the Explicit Proxy device group or parent device group. Source URLs must use a lowercase http/https scheme, a host without inline credentials, a digits-only port, and path components beginning with /; non-conforming URLs such as user:pass@host, missing schemes, or non-numeric ports now fail the commit. Predefined EDLs are exempt, and credentials previously embedded in the URL must move to the EDL's authentication settings.
Cortex XSIAM ships a new Microsoft 365 connector with MIP label write support
A new Microsoft 365 connector replaces the legacy Microsoft365 connector, unifying OneDrive, SharePoint, Teams and Entra ID configuration. It adds Microsoft Information Protection (MIP) label write support (automatic application of sensitivity labels from Cortex Cloud), enhanced remediation actions (delete, change public sharing, quarantine), and faster scanning. Capabilities include Data Security, Identity Posture, Security Posture with config remediation, and Automation and Remediation via Microsoft Graph.
Prisma Browser policy rules add a webpage frame with optional banner text
Access and data control rules can now draw a colored frame around every page in the rule's scope, with optional banner text of up to 255 characters shown in a bar at the top of the page, to indicate the user is working in a regulated or otherwise sensitive environment. The frame is removed when the user navigates outside the rule's scope and is ignored in mobile rules.
Cortex XSIAM adds the Help Center agent for AI-powered troubleshooting and support
A new Help Center agent in the Agentic Assistant performs deployment diagnostics (security policies, platform health, detection rules, data collection), autonomously collects Tech Support Files for endpoints, identifies and installs Marketplace content pack updates with user approval, and operates under human-in-the-loop confirmation and permission-based access. It also serves as the primary gateway for technical support, gathering context and pre-building support cases. Requires AI enablement on the Cortex tenant license.
Cortex adds a Help Center agent for AI-guided troubleshooting and support
New documentation introduces the Help Center agent, an AI assistant reached from Help → Get Support or the Agentic Assistant icon. It grounds troubleshooting in official docs and live tenant diagnostics — checking security policies, platform health, BIOC/IOC rules, endpoints, datasets, broker collectors and content-pack versions — and can autonomously collect Tech Support Files for endpoints and update Marketplace content packs, with human-in-the-loop approval for sensitive actions. It also acts as the primary gateway for technical support, gathering license details and logs to pre-build support cases and intercepting common configuration errors as the user describes an issue. Availability requires AI enablement on the tenant license. Corroborated by a companion page enumerating the agent's diagnostic actions and their pagination limits.
Cortex XSIAM adds an XQL Macro Library for saving and sharing reusable query snippets
A new documentation page describes the Macro Library under Investigations & Response → XQL Search: users save highlighted XQL code as macros from the Query Builder, manage them with the same workflows as saved queries (share, change owner, delete), control visibility via RBAC and SBAC with private/public modes, organize with labels, and are limited to 200 macros. All macro create, edit, delete and access changes are recorded in the management audit log. Macros cannot be edited or deleted while referenced by other objects such as queries, widgets, dashboards or scheduled correlation rules.
Cortex User role in the Customer Support Portal now required for tenant visibility
User access documentation adds a prerequisite: to make users visible in the Cortex tenant, an administrator must first assign them the Cortex User role on the Edit User screen in the Manage User Console of the Customer Support Portal; this role assignment controls both tenant visibility and CSP authentication. SSO-only access is achieved by assigning the Cortex User role without a tenant or Gateway role, and users with no role assigned in the Cortex Gateway or tenant cannot access the tenant and are subsequently revoked.
Cloud Identity Engine now required to activate Identity Analytics detection rules
The Cloud Identity Engine setup guidance changes from describing the service as purely optional to noting that it is required to activate Identity Analytics detection rules. The engine must still be activated in the same region as Cortex XDR.
Agentless Disk Scanning on Azure narrowed to resource-group scope
Cortex's Agentless Disk Scanning (ADS) for Azure now uses three RBAC roles instead of five: ADSScannedAssetsRole and ADSOutpostRole grant read-only access across the onboarded scope, while the new ADSEphemeralResourcesRole holds every permission that creates or deletes a disk, snapshot or gallery image and is confined to the Cortex-created resource group, so Cortex can no longer delete a disk, snapshot or image anywhere else in the tenant.
Role-Based Access Control for Secure Agentless Access
Strata Cloud Manager now lets admins restrict who can view, create, modify or delete Secure Agentless Access configurations, via predefined or custom roles. Access requires role assignments in both All Apps and Services and Cloud Identity Engine; existing predefined roles automatically carry SAA permissions.
Strata Cloud Manager adds security policy rule targeting
A new "Configure Rule Targeting" page describes restricting a container-scoped Strata Cloud Manager security policy rule to a named list of NGFW serial numbers at push time — the Strata Cloud Manager equivalent of Panorama's existing rule-targeting. Migrated Panorama device-group rule targets convert to the enabled-devices format and land disabled for review. Corroborated by the same-day "Network Security: Security Policy" entry in the company's recently-updated documentation index.
Advanced and Legacy Routing Engine coexistence in one Strata Cloud Manager tenant
Strata Cloud Manager now manages both Advanced Routing Engine (Logical Router) and Legacy Routing Engine (Virtual Router) configurations within a single tenant via device-level routing mode selection, so a mixed-generation firewall fleet migrating from Panorama no longer needs separate tenants. The Panorama-to-Strata-Cloud-Manager migration tool converts and pushes both configuration types simultaneously.
Advanced DNS Security adds automatic recovery for degraded DNS signature lookups
A new Advanced DNS Security feature, DNS Signature Lookup Automatic Recovery, keeps DNS traffic flowing when the Advanced DNS Security cloud is unreachable or slow. A DNS Signature Lookup Health Monitor passively tracks the success, failure and timeout rates of live lookup traffic to the cloud, and when connectivity degrades the firewall preserves DNS responses instead of dropping them. It is disabled by default and is enabled per management plane: Strata Cloud Manager under Configuration > NGFW and Prisma Access > Security Services > DNS Security > Settings, or PAN-OS and Panorama under Device > Setup > Content-ID > Realtime Signature Lookup. Operational state is readable from the CLI with 'show running dns-rtsig-monitor'.
Changes
Date
Area / Type
Change
Product
Source
First observed
2026-09-18
analytics-reporting
capability added
Strata Logging Service adds AI Access log type with documented field schemas
Strata Logging Service
docs
First observed
2026-09-18
analytics-reporting
capability added
Strata Logging Service adds AI Supply Chain Scan Event log type
Strata Logging Service
docs
First observed
2026-09-18
api-platform
capability expanded
CloudConnector version requirements extended for PAN-OS 12.x in SCM sync setup
Panorama
docs
First observed
2026-09-18
billing-administration
capability expanded
Prisma Browser adds bundle-license activation through Common Services
Prisma Access Browser
docs
First observed
2026-09-18
billing-administration
capability added
Strata Multitenant Cloud Manager adds PayGo postpaid billing and tenant lifecycle for MSPs
Strata Multitenant Cloud Manager
docs
First observed
2026-09-18
data-import-export
feature added
Amazon S3 flow log collection adds Workload Federated Identity authentication
Cortex XSIAM
docs
First observed
2026-09-18
data-import-export
capability expanded
Strata Logging Service log reference adds AI Access and AI Supply Chain log types
Strata Logging Service
docs
First observed
2026-09-18
data-import-export
capability added
VM-Series decryption port mirroring adds AWS support with IAM role configuration
VM-Series
docs
First observed
2026-09-18
deployment-topology
capability expanded
Cortex XDR adds opt-in scanning of private Azure serverless functions
Cortex XDR 5.x
docs
First observed
2026-09-18
deployment-topology
capability expanded
Cortex XDR Azure onboarding automates per-subscription deployment with Azure Policy
Cortex XDR 5.x
docs
First observed
2026-09-18
deployment-topology
feature added
Cortex XSIAM adds an Amazon ECS EC2 installer package for the Cortex XDR agent
Cortex XSIAM
docs
First observed
2026-09-18
deployment-topology
capability expanded
Cortex XSIAM automates per-subscription Azure deployment with Azure Policy
Cortex XSIAM
docs
First observed
2026-09-18
deployment-topology
capability expanded
Panorama adds documented setup for M-Series Management Only mode
Panorama
docs
First observed
2026-09-18
deployment-topology
feature removed
Upgrade from ESM package type removed from agent installer documentation
Cortex XSIAM
docs
First observed
2026-09-18
fleet-management
capability added
Cortex XDR adds Amazon ECS EC2 agent installation packages
Cortex XDR 5.x
docs
First observed
2026-09-18
fleet-management
capability expanded
Cortex XDR agent installation packages add a Serverless installer for AWS Lambda deployment
Cortex XDR 3.x
First observed
2026-09-18
fleet-management
capability expanded
Panorama documents Selective Push limitations with CSV-imported template variables
Panorama
docs
First observed
2026-09-18
integrations-ecosystem
capability expanded
Cortex XDR reworks cloud instance permission update workflow with state-specific actions
Cortex XDR 5.x
docs
First observed
2026-09-18
network-transport
capability expanded
Decryption port mirroring adds AWS support for VM-Series
PAN-OS
docs
First observed
2026-09-18
network-transport
capability expanded
HA link documentation covers HSCI-based links on PA-3500, PA-5500 and PA-7500 series
PAN-OS
docs
First observed
2026-09-18
network-transport
capability expanded
HA links docs detail HSCI port roles on newer firewall series
Next-Generation Firewall
docs
First observed
2026-09-18
network-transport
capability expanded
Network Packet Broker adds support for PA-7500, PA-5500 and PA-3500 Series
Next-Generation Firewall
docs
First observed
2026-09-18
network-transport
capability expanded
Network Packet Broker adds support for PA-7500, PA-5500 and PA-3500 Series
PAN-OS
docs
First observed
2026-09-18
network-transport
capability expanded
PAN-OS virtual router configuration documented in Strata Cloud Manager
PAN-OS
docs
First observed
2026-09-18
network-transport
feature added
Prisma Access 6.1 enforces strict source URL format for External Dynamic Lists used by Explicit Proxy
Prisma Access
docs
212 more
First observed
2026-09-18
network-transport
capability expanded
Strata Cloud Manager adds logical router clone, troubleshooting and Panorama migration
PAN-OS
docs
First observed
2026-09-18
network-transport
capability expanded
Strata Cloud Manager consolidates network profile management into a single page
Next-Generation Firewall
docs
First observed
2026-09-18
network-transport
capability expanded
Virtual router configuration in Strata Cloud Manager reaches general availability with clone and troubleshooting workflows
Next-Generation Firewall
docs
First observed
2026-09-18
performance-scale
limit change
Prisma Access changes mobile user egress IP allocation to a tiered schedule
Prisma Access
docs
First observed
2026-09-18
search-retrieval
capability expanded
Cortex XSIAM graph search shows effective permissions with access level and raw action
Cortex XSIAM
docs
First observed
2026-09-18
security-compliance
endpoint deprecated
Compliance Controls v2 category endpoints removed from Cortex XDR 5.x API docs
Cortex XDR 5.x
docs
First observed
2026-09-18
security-compliance
endpoint deprecated
Compliance Controls v2 standard endpoints removed from Cortex XDR 5.x API docs
Cortex XDR 5.x
docs
First observed
2026-09-18
security-compliance
capability expanded
Cortex XDR redesigns cloud permission update flow with IaC template and manual resolution paths
Cortex XDR 5.x
docs
First observed
2026-09-18
security-compliance
capability expanded
Cortex XSIAM adds private serverless function scanning on Azure via private endpoint approval
Cortex XSIAM
docs
First observed
2026-09-18
security-compliance
capability expanded
Luna HSM integration docs add client installation and version selection steps
Next-Generation Firewall
docs
First observed
2026-09-18
security-compliance
capability expanded
New Microsoft 365 connector adds delete, sharing-change and quarantine remediation
Cortex Cloud Posture Management
docs
First observed
2026-09-18
security-compliance
capability expanded
New Microsoft 365 connector adds MIP sensitivity label write support
Cortex Cloud Posture Management
docs
First observed
2026-09-18
security-compliance
capability expanded
Prisma Browser adds policy-driven file transfer controls in Native RDP sessions
Prisma Access Browser
docs
First observed
2026-09-18
threat-defense
capability expanded
Cortex XDR 5.x broadens case grouping qualification to Medium-severity Posture issues
Cortex XDR 5.x
docs
First observed
2026-09-18
threat-defense
capability expanded
Cortex XDR hashes Azure storage keys to correlate against discovered secrets
Cortex XDR 5.x
docs
First observed
2026-09-18
threat-defense
other
PAN-OS 11.1.6-h38 patch release addresses two CVEs and multiple fixes
PAN-OS
docs
Shipped
2026-09-17
unmapped
other
Network Discovery Plugin 3.2.2 release notes published
IoT / Device Security
docs
Shipped
2026-09-17
unmapped
other
PAN-OS 11.0 and 10.1 marked End-of-Life in release note updates
PAN-OS
docs
Shipped
2026-09-17
unmapped
other
PAN-OS 11.0 and 10.1 marked End-of-Life in release-notes index
PAN-OS
changelog
Shipped
2026-09-16
threat-defense
other
Cortex XDR content update 2430 releases with compatibility rule updates across protection modules
Cortex XDR Content Updates
docs
First observed
2026-09-15
ai-assist
capability expanded
Cortex XDR 5.x Help Center agent documentation expanded with tenant diagnosis and support-ticket prefill
Cortex XDR 5.x
docs
First observed
2026-09-15
analytics-reporting
capability expanded
Strata Logging Service documents default syslog field order for Application Security logs
Strata Logging Service
docs
First observed
2026-09-15
analytics-reporting
capability expanded
Strata Logging Service drops Remote Browser Isolation from its documented log types
Strata Logging Service
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 bulk create endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 bulk delete endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 bulk update endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 create endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 delete endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 get endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 list endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
endpoint deprecated
Compliance Controls v2 update endpoint removed from documentation
Cortex XSIAM
docs
First observed
2026-09-15
api-platform
feature added
PAN-OS Plugin for OpenConfig 2.1.6 released
VM-Series
changelog
First observed
2026-09-15
data-import-export
capability expanded
Database Collector Replace mode documents automatic PANW/db_collector dataset naming
Cortex XDR 3.x
docs
First observed
2026-09-15
deployment-topology
feature removed
Broker VM Pathfinder applet deprecated in Cortex XDR 5.0
Cortex XDR 5.x
docs
First observed
2026-09-15
deployment-topology
other
Broker VM upgrades require reinstall on Debian 13 image for pre-Feb 2026 deployments
Cortex XDR 3.x
docs
First observed
2026-09-15
deployment-topology
capability expanded
Cortex XSIAM restructures cloud instance permission updates with state-specific actions and IaC template download
Cortex XSIAM
docs
First observed
2026-09-15
deployment-topology
other
Gemini 3.5 Flash availability extended to Canada and Germany regions
Cortex XDR 5.x
docs
First observed
2026-09-15
fleet-management
feature removed
Cortex XDR removes specific-version content rollout option
Cortex XDR 5.x
docs
First observed
2026-09-15
integrations-ecosystem
capability expanded
Microsoft 365 data collector moves to Microsoft Graph Security v2 GA endpoint
Cortex XDR 5.x
docs
First observed
2026-09-15
network-transport
capability expanded
Prisma Browser remote connections add SMB-based application targets
Prisma Access Browser
docs
First observed
2026-09-15
security-compliance
other
Compliance Controls API v2 endpoints removed from Cortex XDR documentation
Cortex XDR 5.x
docs
First observed
2026-09-15
security-compliance
capability expanded
Cortex XDR documents applying Terraform template updates for cloud instances
Cortex XDR 5.x
docs
First observed
2026-09-15
security-compliance
capability expanded
Cortex XDR documents hash-only handling of Azure storage account keys for exposed-key detection
Cortex XDR 5.x
docs
First observed
2026-09-15
security-compliance
feature added
Cortex XSIAM ships a new Microsoft 365 connector with MIP label write support
Cortex XSIAM
docs
First observed
2026-09-15
security-compliance
capability expanded
IP-based enforcement adds Idira as an identity provider option
Prisma Access Browser
docs
First observed
2026-09-15
security-compliance
capability expanded
Kubernetes platform support matrix rewritten for Cortex XDR agent real-time protection
Cortex XDR 5.x
docs
First observed
2026-09-15
security-compliance
other
Legacy Microsoft365 connector deprecated in favor of the new Microsoft 365 connector
Cortex XSIAM
docs
First observed
2026-09-15
security-compliance
capability added
Prisma Browser policy rules add a webpage frame with optional banner text
Prisma Access Browser
docs
First observed
2026-09-15
security-compliance
capability expanded
Windows account-based SSO now links browser logins to Microsoft Entra ID
Prisma Access Browser
docs
First observed
2026-09-15
threat-defense
capability expanded
Cloud Identity Engine required for Identity Analytics detection rules
Cortex XDR 3.x
docs
First observed
2026-09-15
threat-defense
capability expanded
Cortex Data Security documents disk-data snapshot permission for GCP agentless scanning
Cortex Data Security
docs
First observed
2026-09-15
threat-defense
capability expanded
Cortex XSIAM Azure onboarding now hashes storage account keys to flag exposed keys for Attack Path analysis
Cortex XSIAM
docs
First observed
2026-09-15
threat-defense
capability expanded
Cortex XSIAM broadens case grouping qualification to Medium-severity Posture issues
Cortex XSIAM
docs
First observed
2026-09-15
threat-defense
capability expanded
Cortex XSIAM cloud identity security detects exposed GCP OAuth client secrets
Cortex XSIAM
docs
First observed
2026-09-15
threat-defense
limit change
JFrog container registry scanning documents an 80 GB image size limit
Cortex XSIAM
docs
First observed
2026-09-15
threat-defense
other
PAN-OS 12.2.3 fixes CVE-2026-0310 and CVE-2026-0309
Next-Generation Firewall
docs
First observed
2026-09-15
unmapped
other
Cortex XSOAR 8 On-prem end-of-life announced for September 30, 2029
Cortex XSOAR 8 (on-prem)
docs
Shipped
2026-09-14
billing-administration
capability expanded
Device Security adds activation via the Precision AI Network Security Bundle
IoT / Device Security
docs
Shipped
2026-09-14
integrations-ecosystem
capability expanded
Device Security's Cortex XDR integration gains XQL support
IoT / Device Security
docs
First observed
2026-09-12
ai-agents
capability added
Cortex XSIAM adds the Help Center agent for AI-powered troubleshooting and support
Cortex XSIAM
docs
First observed
2026-09-12
ai-assist
capability added
Cortex adds a Help Center agent for AI-guided troubleshooting and support
Cortex Cloud Runtime Security
docs
First observed
2026-09-12
ai-assist
capability expanded
Help Center agent actions documented: live tenant diagnostics and support-case automation
Cortex Cloud Posture Management
docs
First observed
2026-09-12
analytics-reporting
feature added
OpenConfig Plugin 2.1.6 adds OpenConfig leaf-path support for additional SNMP OIDs
VM-Series
changelog
First observed
2026-09-12
analytics-reporting
feature added
OpenConfig Plugin 2.1.6 adds subscribe and get RPC support for interface last-change leaf path
VM-Series
changelog
First observed
2026-09-12
analytics-reporting
feature added
OpenConfig Plugin 2.1.6 fixes gNMI subcomponent state and plugin build TLS issues
VM-Series
changelog
First observed
2026-09-12
api-platform
capability expanded
Registry scanning connector management documented as public API endpoints
Cortex Cloud Runtime Security
docs
First observed
2026-09-12
network-transport
capability expanded
Azure GWLB integration documented as IPv4-only
VM-Series
docs
First observed
2026-09-12
performance-scale
limit change
GitLab container registry scanning documents an 80 GB image size limit
Cortex XSIAM
docs
First observed
2026-09-12
permissions-governance
limit change
Cortex XSIAM documents a limit of just under 2000 asset groups
Cortex XSIAM
docs
First observed
2026-09-12
search-retrieval
capability added
Cortex XSIAM adds an XQL Macro Library for saving and sharing reusable query snippets
Cortex XSIAM
docs
First observed
2026-09-12
security-compliance
limit change
Asana SaaS Security connector documents supported account plans and service-account onboarding
Cortex XSIAM
docs
First observed
2026-09-12
security-compliance
other
Salesforce connector OAuth callback now requires the org-specific Salesforce domain
Cortex XSIAM
docs
First observed
2026-09-12
threat-defense
capability expanded
Container Registry Scanning docs add scan re-evaluation and WildFire detonation upload
Cortex XSIAM
docs
First observed
2026-09-12
threat-defense
capability expanded
Cortex XSIAM base image rules documented with lineage tracing
Cortex XSIAM
docs
First observed
2026-09-12
threat-defense
limit change
Cortex XSIAM documents an 80 GB image size limit for container registry scanning
Cortex XSIAM
docs
First observed
2026-09-12
threat-defense
capability expanded
Cortex XSIAM documents the full cloud security rule type catalog
Cortex XSIAM
docs
First observed
2026-09-12
threat-defense
capability expanded
Cortex XSIAM reworks cloud instance permission-update flow with state-aware action buttons
Cortex XSIAM
docs
First observed
2026-09-12
threat-defense
capability expanded
Digital Risk Protection details credential leak sourcing across paste sites, breaches and dark web
Cortex XSIAM
docs
First observed
2026-09-12
threat-defense
feature added
OpenConfig Plugin 2.1.6 fixes gNMI command execution and file access security issues
VM-Series
changelog
First observed
2026-09-12
threat-defense
other
PAN-OS 11.1 hotfixes address CVE-2026-0308, CVE-2026-0309 and CVE-2026-0310
PAN-OS
docs
First observed
2026-09-12
threat-defense
capability expanded
Registry connectors gain exclude/include image scanning-scope conditions
Cortex Cloud Posture Management
docs
First observed
2026-09-12
threat-defense
limit change
Registry scanning documents an 80 GB container image size limit
Cortex Cloud Posture Management
docs
First observed
2026-09-12
unmapped
other
PAN-OS Plugin for OpenConfig 2.1.6 released
VM-Series
changelog
First observed
2026-09-11
analytics-reporting
capability expanded
Cortex XSIAM XQL adds SLA tracking functions is_sla_breached and sla_time_remaining
Cortex XSIAM
docs
First observed
2026-09-11
analytics-reporting
capability expanded
Email DLP logs add Retry and Purge actions for queued emails
Enterprise DLP
docs
First observed
2026-09-11
analytics-reporting
capability expanded
Incident settings framework adds ZTNA application object incident settings
Strata Cloud Manager
docs
First observed
2026-09-11
api-platform
endpoint added
New SBOM repository endpoint with query-parameter repoId and streamed response
Cortex XSIAM
docs
First observed
2026-09-11
api-platform
feature tier change
SBOM API license requirement broadened beyond Cortex XSIAM Premium
Cortex XSIAM
docs
First observed
2026-09-11
api-platform
endpoint deprecated
SBOM organization endpoint moves orgName from path to query parameter
Cortex XSIAM
docs
First observed
2026-09-11
api-platform
endpoint added
SBOM organization export now returns a downloadable ZIP bundle
Cortex XSIAM
docs
First observed
2026-09-11
api-platform
endpoint deprecated
SBOM repository endpoint moves repoId from path to query parameter
Cortex XSIAM
docs
First observed
2026-09-11
deployment-topology
feature added
Agentic AI model selector extends Gemini 3.5 Flash to CA and DE regions
Cortex XSIAM
docs
First observed
2026-09-11
deployment-topology
capability expanded
Cortex Data Security CSP onboarding adds Alibaba Cloud support
Cortex Data Security
docs
First observed
2026-09-11
integrations-ecosystem
capability expanded
Cortex XSIAM documents Alibaba Cloud onboarding with Terraform and Workload Identity Federation
Cortex XSIAM
docs
First observed
2026-09-11
integrations-ecosystem
capability expanded
MongoDB Atlas (Posture) onboarding documented
Cortex Cloud Posture Management
docs
First observed
2026-09-11
integrations-ecosystem
capability expanded
Salesforce near-real-time log and data ingestion documented
Cortex Cloud Posture Management
docs
First observed
2026-09-11
network-transport
capability expanded
Agent Proxy Communication limit raised to 10 proxies per agent
Cortex XDR Agent
docs
First observed
2026-09-11
network-transport
limit change
Cortex XDR agent raises proxy limit from 5 to 10 per agent
Cortex XDR Agent
docs
First observed
2026-09-11
permissions-governance
capability expanded
Alibaba Cloud least-privilege onboarding permission model documented
Cortex Cloud Posture Management
docs
First observed
2026-09-11
permissions-governance
feature added
Cortex User role in the Customer Support Portal now required for tenant visibility
Cortex XDR 5.x
docs
First observed
2026-09-11
search-retrieval
capability expanded
Code-to-Cloud lineage filtering reference documentation added
Cortex Cloud Posture Management
docs
First observed
2026-09-11
security-compliance
capability expanded
Cortex XDR adds Alibaba Cloud cloud service provider onboarding
Cortex XDR 5.x
docs
First observed
2026-09-11
security-compliance
capability expanded
DSPM Database applet activation documented for on-premises PostgreSQL and MySQL
Cortex Cloud Posture Management
docs
First observed
2026-09-11
security-compliance
capability expanded
Strata Cloud Manager adds centralized per-tenant master key management and sync to managed firewalls
Next-Generation Firewall
docs
First observed
2026-09-11
threat-defense
capability expanded
App Security expands location coverage to more Prisma Access regions
Prisma Access
docs
First observed
2026-09-11
threat-defense
feature added
Cloud Identity Engine now required to activate Identity Analytics detection rules
Cortex XDR 5.x
docs
First observed
2026-09-11
threat-defense
capability expanded
Sonatype Nexus registry scanning connector documented with scan modes and image scoping
Cortex Cloud Posture Management
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates Behavioral Threat Protection rules
Cortex XDR Content Updates
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates Child Process Protection module
Cortex XDR Content Updates
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates DPI packet inspection rules
Cortex XDR Content Updates
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates EDR detection module rules
Cortex XDR Content Updates
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates Java Protection module rules
Cortex XDR Content Updates
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates Local Analysis Protection allow list
Cortex XDR Content Updates
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates Local Threat-Evaluation Engine rules
Cortex XDR Content Updates
docs
Shipped
2026-09-08
threat-defense
capability expanded
Cortex XDR content 2420 updates vulnerability assessment detection database
Cortex XDR Content Updates
docs
Shipped
2026-09-06
ai-assist
feature added
Cortex Cloud Posture 2.2 brings Gemini 3.5 Flash to CA and DE regions
Cortex Cloud Posture Management
docs
Shipped
2026-09-06
ai-assist
feature added
Cortex Cloud Runtime 2.2 extends Native Frontier AI to CA and DE regions
Cortex Cloud Runtime Security
docs
First observed
2026-09-06
api-platform
endpoint added
GET /public_api/appsec/v1/sbom/repository takes repoId as a query parameter
Cortex XDR 5.x
docs
First observed
2026-09-06
api-platform
endpoint deprecated
Organization SBOM export drops the {orgName} path parameter
Cortex XDR 5.x
docs
First observed
2026-09-06
api-platform
endpoint added
Organization SBOM export returns a ZIP archive of per-repository SBOMs
Cortex XDR 5.x
docs
First observed
2026-09-06
api-platform
endpoint deprecated
SBOM repository export drops the {repoId} path parameter
Cortex XDR 5.x
docs
First observed
2026-09-06
performance-scale
limit change
Asset group count capped at just under 2000
Cortex Cloud Posture Management
docs
First observed
2026-09-06
permissions-governance
capability expanded
Alibaba Cloud onboarding permissions published for Cortex Data Security
Cortex Data Security
docs
First observed
2026-09-06
security-compliance
capability expanded
Cloning a compliance standard now includes a control selection step
Cortex XDR 5.x
docs
Shipped
2026-09-06
threat-defense
capability expanded
AI-determined alert-causality correlation gains 46 named attack-chain combinations
Cortex Analytics Content
docs
Shipped
2026-09-06
threat-defense
capability expanded
AWS coverage adds Route53 logging, KMS key policy and versioned-S3 deletion detectors
Cortex Analytics Content
docs
Shipped
2026-09-06
threat-defense
other
Cortex analytics content release 2026.08.26
Cortex Analytics Content
docs
Shipped
2026-09-06
threat-defense
capability expanded
Email coverage adds mailbox-access anomaly detectors
Cortex Analytics Content
docs
Shipped
2026-09-06
threat-defense
capability expanded
Endpoint coverage adds JS-runtime credential theft and net-command user management
Cortex Analytics Content
docs
First observed
2026-09-05
billing-administration
plan added
Prisma Pro license appears as an entitlement for Enterprise DLP, AI Access Security and SaaS Security
Cross-product
docs
First observed
2026-09-04
ai-agents
capability expanded
Agentic Assistant's Help Center agent gains tenant diagnostics and ticket prefill
Cortex Cloud Runtime Security
docs
First observed
2026-09-04
ai-agents
capability expanded
Cortex AgentiX Help Center system agent gains cross-suite diagnostics and auto-prefilled tickets
Cortex AgentiX
docs
First observed
2026-09-04
ai-agents
capability expanded
Help Center Agent Gains Cross-Product Diagnosis and Ticket Prefill
Cortex XSIAM
docs
First observed
2026-09-04
analytics-reporting
capability expanded
Business Application inventory gains business-unit and asset bulk actions
Cortex Cloud Application Security
docs
First observed
2026-09-04
billing-administration
capability expanded
Cortex AgentiX compute-unit quota moves from daily to yearly allocation
Cortex AgentiX
docs
First observed
2026-09-04
billing-administration
other
Enhanced Application Logs Become Non-Billable
Cortex XSIAM
docs
First observed
2026-09-04
mobile-desktop
capability expanded
Endpoint DLP peripheral control policy adds desktop app scoping
Enterprise DLP
docs
First observed
2026-09-04
mobile-desktop
capability expanded
Endpoint DLP peripheral inventory adds desktop app support (Google Drive, OneDrive)
Enterprise DLP
docs
First observed
2026-09-04
performance-scale
capability expanded
Advanced Forwarding configurable through Strata Cloud Manager
SaaS Security
docs
First observed
2026-09-04
performance-scale
capability expanded
Advanced Forwarding extends to Prisma Access
Advanced WildFire
docs
First observed
2026-09-04
performance-scale
capability expanded
App Acceleration Expands to Nine Additional Prisma Access Locations
Prisma Access
docs
First observed
2026-09-04
permissions-governance
capability added
Agentless Disk Scanning on Azure narrowed to resource-group scope
Cortex Data Security
docs
First observed
2026-09-04
permissions-governance
capability added
Role-Based Access Control for Secure Agentless Access
Prisma Access
docs
First observed
2026-09-04
security-compliance
capability expanded
Compliance controls can attach to multiple standards
Cortex Cloud Runtime Security
docs
First observed
2026-09-04
security-compliance
capability expanded
Custom compliance standards decouple controls from a single category hierarchy
Cortex XDR 5.x
docs
First observed
2026-09-04
threat-defense
new product
Advanced IP Defense Emerges as a Separately Licensed Palo Alto Networks Capability
Cross-product
docs
First observed
2026-09-04
threat-defense
capability expanded
App Security Expands to Nine Additional Prisma Access Locations
Prisma Access
docs
First observed
2026-09-04
threat-defense
capability expanded
Identity Threat Detection and Response Adds CyberArk ISP Integration
Cortex XSIAM
docs
First observed
2026-09-04
threat-defense
capability expanded
ITDR adds CyberArk ISP as an audit-event source
Cortex Cloud Runtime Security
docs
First observed
2026-09-04
threat-defense
new integration
Prisma Access RBI Adds Oracle Cloud Infrastructure as a Deployment Platform
Prisma Access
docs
First observed
2026-09-04
threat-defense
capability expanded
Remote Browser Isolation Adds Oracle Cloud Infrastructure Hosting
Prisma Access
docs
First observed
2026-09-03
api-platform
capability expanded
Prisma Browser adds a Hide Sensitive Data from Extensions control
Prisma Access Browser
docs
Shipped
2026-09-03
fleet-management
capability added
Strata Cloud Manager adds security policy rule targeting
Cross-product
docs
First observed
2026-09-03
mobile-desktop
capability expanded
Prisma Browser Extension deployment generator drops Safari from its browser selection list
Prisma Access Browser
docs
First observed
2026-09-03
permissions-governance
capability expanded
Prisma Browser adds CIDR range support for private application definitions
Prisma Access Browser
docs
First observed
2026-09-03
threat-defense
capability expanded
Prisma Browser adds an Enhanced Tracking Protection control
Prisma Access Browser
docs
First observed
2026-09-03
threat-defense
integration removed
Prisma Browser drops the Symantec DLP file-scanning integration
Prisma Access Browser
docs
First observed
2026-09-03
threat-defense
integration removed
Prisma Browser drops the YazamTech SelectorIT file-scanning integration
Prisma Access Browser
docs
Shipped
2026-09-02
network-transport
capability added
Advanced and Legacy Routing Engine coexistence in one Strata Cloud Manager tenant
Strata Cloud Manager
docs
First observed
2026-09-01
analytics-reporting
capability expanded
PAN-OS replaces the transient _cliuser telemetry account with a permanent __telemetryuser system account
Next-Generation Firewall
docs
First observed
2026-09-01
analytics-reporting
capability expanded
PAN-OS replaces the transient _cliuser telemetry account with a permanent __telemetryuser system account
PAN-OS
docs
First observed
2026-09-01
billing-administration
feature tier change
Cloud Posture Management narrows its bundled Cortex Data Security to DSPM; DLP and DDR move behind a paid add-on
Cortex Cloud Posture Management
docs
First observed
2026-09-01
data-import-export
capability expanded
Cortex XSOAR 8 On-prem adds on-demand incident export and a UI abort for running exports
Cortex XSOAR 8 (on-prem)
docs
Shipped
2026-09-01
deployment-topology
feature added
PAN-OS 12.1.10 introduces PA-520-5G Next-Generation Firewall hardware
Next-Generation Firewall
docs
Shipped
2026-09-01
deployment-topology
feature added
PAN-OS 12.1/12.2 adds the PA-520-5G firewall with embedded 5G cellular WAN
Next-Generation Firewall
docs
First observed
2026-09-01
integrations-ecosystem
other
AWS log-collection connectors now require sqs:GetQueueAttributes
Cortex XSIAM
docs
First observed
2026-09-01
integrations-ecosystem
other
AWS log-collection connectors now require sqs:GetQueueAttributes
Cortex XDR 5.x
docs
First observed
2026-09-01
integrations-ecosystem
other
AWS log-collection connectors now require sqs:GetQueueAttributes
Cortex XDR 3.x
docs
First observed
2026-09-01
integrations-ecosystem
other
AWS log-collection connectors now require sqs:GetQueueAttributes
Cortex Cloud Runtime Security
docs
First observed
2026-09-01
integrations-ecosystem
capability expanded
Cortex XDR agent for iOS gains a documented Microsoft Intune deployment path
Cortex XDR Agent
docs
First observed
2026-09-01
performance-scale
capability added
Advanced DNS Security adds automatic recovery for degraded DNS signature lookups
DNS Security
docs
First observed
2026-09-01
permissions-governance
capability expanded
Cortex Gateway adds Cortex AgentiX tenant activation
Cross-product
docs
First observed
2026-09-01
permissions-governance
capability expanded
Cortex Gateway publishes a predefined role set for Cortex AgentiX
Cross-product
docs
First observed
2026-09-01
threat-defense
capability expanded
Cloud Runtime Security enumerates four bundled Cortex Data Security modules, including Data Access Governance
Cortex Cloud Runtime Security
docs
First observed
2026-09-01
workflow-automation
capability expanded
Cortex commands API adds eleven read commands across findings, datasets, IOC rules and exceptions
Cross-product
docs
First observed
2026-09-01
workflow-automation
capability expanded
Cortex commands API adds YARA rule management and endpoint YARA scanning
Cross-product
docs
First observed
2026-08-31
billing-administration
capability expanded
Cortex Audit Logs made non-billable; two ingestion widgets added
Cortex XSIAM
docs
First observed
2026-08-31
billing-administration
capability expanded
Cortex Audit Logs made non-billable; two ingestion widgets added
Cortex XDR 5.x
docs
First observed
2026-08-31
deployment-topology
capability expanded
AWS CloudTrail connector renames its IAM role and reroutes notifications via SNS
Cortex XDR 5.x
docs
First observed
2026-08-31
deployment-topology
capability expanded
Manual deployment method added to cloud service provider onboarding
Cortex XDR 5.x
docs
First observed
2026-08-31
deployment-topology
capability expanded
Manual deployment method added to cloud service provider onboarding
Cortex Cloud Posture Management
docs
First observed
2026-08-31
deployment-topology
capability expanded
Manual deployment method added to cloud service provider onboarding
Cortex Cloud Runtime Security
docs
First observed
2026-08-31
deployment-topology
capability expanded
Manual deployment method added to cloud service provider onboarding
Cortex Data Security
docs
First observed
2026-08-31
integrations-ecosystem
feature removed
Argo CD dropped from discovered CI/CD providers
Cortex Cloud Application Security
docs
First observed
2026-08-31
integrations-ecosystem
capability expanded
AWS CloudTrail connector renames its IAM role and reroutes notifications via SNS
Cortex XSIAM
docs
First observed
2026-08-31
integrations-ecosystem
capability expanded
Manual deployment method added to cloud service provider onboarding
Cortex XSIAM
docs
First observed
2026-08-31
performance-scale
limit change
2,000-field per-dataset limit documented
Cortex XSIAM
docs
First observed
2026-08-31
performance-scale
limit change
2,000-field per-dataset limit documented
Cortex XDR 5.x
docs
First observed
2026-08-31
performance-scale
limit change
2,000-field per-dataset limit documented
Cortex XDR 3.x
docs
First observed
2026-08-30
deployment-topology
capability expanded
Cortex Data Security adds a Custom Control Tower mode for AWS audit log collection
Cortex Data Security
docs
First observed
2026-08-30
permissions-governance
capability expanded
PAN-OS 12.2 replaces the User Context cloud service setting with a User Context Cloud Redistribution Service
Next-Generation Firewall
docs
Shipped
2026-08-29
analytics-reporting
capability expanded
Device Security device dictionary gains 231 profiles, 96 vendors and 469 models across four August 2026 updates
IoT / Device Security
docs
First observed
2026-08-29
analytics-reporting
other
Strata Cloud Manager documents Essentials-tier limits on the command center
Strata Cloud Manager
docs
First observed
2026-08-29
analytics-reporting
other
Strata Cloud Manager marks Activity Insights columns, filters and widgets as Pro-only
Strata Cloud Manager
docs
First observed
2026-08-29
billing-administration
other
Strata Cloud Manager publishes a 30-day activation window for Essentials-to-Pro upgrades
Strata Cloud Manager
docs
First observed
2026-08-29
integrations-ecosystem
capability expanded
Prisma AIRS publishes the LLM API formats it inspects, separate from model-ID configurability
Prisma AIRS
docs
First observed
2026-08-29
security-compliance
capability expanded
Cortex Data Security adds Microsoft Teams channel and chat message scanning
Cortex Data Security
docs
First observed
2026-08-29
threat-defense
feature tier change
Cortex XSIAM Registry Scanner entitlement extends to the Cloud Posture Security add-on
Cortex XSIAM
docs
Shipped
2026-08-27
fleet-management
capability expanded
Prisma Agent app settings rules gain device attribute match criteria
Prisma Agent
docs
Shipped
2026-08-27
mobile-desktop
capability expanded
Prisma Agent adds Ubuntu 26.04 LTS support on x86_64 and ARM64
Prisma Agent
docs
Shipped
2026-08-27
mobile-desktop
capability expanded
Prisma Agent drops the sudo -E requirement for Linux install, upgrade and uninstall
Prisma Agent
docs
Shipped
2026-08-27
mobile-desktop
capability expanded
Prisma Agent on iOS can share diagnostic logs from the enrollment page
Prisma Agent
docs
Shipped
2026-08-27
network-transport
capability expanded
Prisma Agent dynamic location-based traffic steering extends to Linux
Prisma Agent
docs
Shipped
2026-08-27
network-transport
capability expanded
Prisma Agent enforces forwarding profile policy on Linux Docker container traffic via eBPF
Prisma Agent
docs
Shipped
2026-08-27
network-transport
capability expanded
Prisma Agent extends Best Available - Fail Safe to Linux agents
Prisma Agent
docs
Shipped
2026-08-27
network-transport
capability expanded
Prisma Agent IPv6 dual-stack support reaches iOS
Prisma Agent
docs
Shipped
2026-08-27
security-compliance
capability expanded
Prisma Agent adds client certificate authentication on Linux
Prisma Agent
docs
Shipped
2026-08-27
security-compliance
capability expanded
Prisma Agent LDAP authentication reaches iOS
Prisma Agent
docs
Shipped
2026-08-27
security-compliance
capability expanded
Prisma Agent moves granular certificate selection into Agent Settings
Prisma Agent
docs
Shipped
2026-08-27
security-compliance
capability expanded
Prisma Agent on iOS can use the default system browser for SAML authentication
Prisma Agent
docs
First observed
2026-08-26
performance-scale
limit change
Cloud NGFW for AWS raises the multi-VPC endpoint ceiling to 300
Cloud NGFW for AWS
docs
First observed
2026-08-26
threat-defense
capability expanded
Enterprise DLP is auto-provisioned when Cloud NGFW for AWS links a policy manager
Cloud NGFW for AWS
docs
Named in changes
45
amazon-ecs
Cortex XDR adds Amazon ECS EC2 agent installation packages
2026-09-18 · 2 changes
amazon-s3
Amazon S3 flow log collection adds Workload Federated Identity authentication
2026-09-18 · 2 changes
aws
VM-Series decryption port mirroring adds AWS support with IAM role configuration
2026-09-18 · 4 changes
aws-lambda
Cortex XDR agent installation packages add a Serverless installer for AWS Lambda deployment
2026-09-18
azure
Cortex XDR Azure onboarding automates per-subscription deployment with Azure Policy
2026-09-18 · 7 changes
kubernetes
Cortex XDR agent installation packages add a Serverless installer for AWS Lambda deployment
2026-09-18
microsoft-365
New Microsoft 365 connector adds MIP sensitivity label write support
2026-09-18 · 4 changes
microsoft-entra-id
New Microsoft 365 connector adds delete, sharing-change and quarantine remediation
2026-09-18 · 2 changes
microsoft-purview-information-protection
New Microsoft 365 connector adds MIP sensitivity label write support
2026-09-18
pan-os
CloudConnector version requirements extended for PAN-OS 12.x in SCM sync setup
2026-09-18
cve-2026-0309
PAN-OS 12.2.3 fixes CVE-2026-0310 and CVE-2026-0309
2026-09-15
cve-2026-0310
PAN-OS 12.2.3 fixes CVE-2026-0310 and CVE-2026-0309
2026-09-15
33 more
gemini-3-5-flash
Gemini 3.5 Flash availability extended to Canada and Germany regions
2026-09-15 · 4 changes
google-cloud-platform
Cortex XSIAM cloud identity security detects exposed GCP OAuth client secrets
2026-09-15
microsoft-graph
Microsoft 365 data collector moves to Microsoft Graph Security v2 GA endpoint
2026-09-15
terraform
Cortex XDR documents applying Terraform template updates for cloud instances
2026-09-15 · 4 changes
cortex-xdr
Device Security's Cortex XDR integration gains XQL support
2026-09-14
amazon-bedrock
Cortex XSIAM documents the full cloud security rule type catalog
2026-09-12 · 2 changes
amazon-sagemaker
Cortex XSIAM documents the full cloud security rule type catalog
2026-09-12
azure-openai
Cortex XSIAM documents the full cloud security rule type catalog
2026-09-12
gcp-vertex-ai
Cortex XSIAM documents the full cloud security rule type catalog
2026-09-12
alibaba-cloud
Alibaba Cloud least-privilege onboarding permission model documented
2026-09-11 · 4 changes
mongodb
MongoDB Atlas (Posture) onboarding documented
2026-09-11
mysql
DSPM Database applet activation documented for on-premises PostgreSQL and MySQL
2026-09-11
postgres
DSPM Database applet activation documented for on-premises PostgreSQL and MySQL
2026-09-11
salesforce
Salesforce near-real-time log and data ingestion documented
2026-09-11
sonatype
Sonatype Nexus registry scanning connector documented with scan modes and image scoping
2026-09-11
alibaba
Alibaba Cloud onboarding permissions published for Cortex Data Security
2026-09-06
git
Endpoint coverage adds JS-runtime credential theft and net-command user management
2026-09-06
mitre-attack
AI-determined alert-causality correlation gains 46 named attack-chain combinations
2026-09-06
cyberark
Identity Threat Detection and Response Adds CyberArk ISP Integration
2026-09-04 · 2 changes
oracle-cloud-infrastructure
Remote Browser Isolation Adds Oracle Cloud Infrastructure Hosting
2026-09-04
safari
Prisma Browser Extension deployment generator drops Safari from its browser selection list
2026-09-03
microsoft-intune
Cortex XDR agent for iOS gains a documented Microsoft Intune deployment path
2026-09-01
sierra-em9293
PAN-OS 12.1/12.2 adds the PA-520-5G firewall with embedded 5G cellular WAN
2026-09-01
yara
Cortex commands API adds YARA rule management and endpoint YARA scanning
2026-09-01
argo-cd
Argo CD dropped from discovered CI/CD providers
2026-08-31
google-vertex-ai
Prisma AIRS publishes the LLM API formats it inspects, separate from model-ID configurability
2026-08-29
microsoft-teams
Cortex Data Security adds Microsoft Teams channel and chat message scanning
2026-08-29
openai
Prisma AIRS publishes the LLM API formats it inspects, separate from model-ID configurability
2026-08-29
docker
Prisma Agent enforces forwarding profile policy on Linux Docker container traffic via eBPF
2026-08-27
ios
Prisma Agent on iOS can use the default system browser for SAML authentication
2026-08-27 · 4 changes
ldap
Prisma Agent LDAP authentication reaches iOS
2026-08-27
linux
Prisma Agent extends Best Available - Fail Safe to Linux agents
2026-08-27 · 5 changes
ubuntu
Prisma Agent adds Ubuntu 26.04 LTS support on x86_64 and ARM64
2026-08-27
Select a row