AI is accelerating innovation faster than ever. With AI assisted coding, teams are building cloud-native applications at an unprecedented speed. Rapid development, of course, introduces risks and vulnerabilities into production. One in every three pieces of GenAI code contains vulnerabilities, giving adversaries an advantage that compounds exponentially. Attackers are also moving twice as quickly to exfiltrate data from multicloud environments. It's clear, in other words, that the question isn’t if attackers find your blind spots but when—and whether you’ll be ready.
We built Cortex® CloudTM to solve this problem. Traditional CNAPPs only react after an issue emerges, creating a dangerous lag in the era of AI-driven development. We took the first critical step by unifying best-in-class cloud detection and response (CDR) and industry-leading cloud-native application protection platform (CNAPP) capabilities on the Cortex® platform. Now, to meet the new challenge of AI-driven threats, we are introducing Cortex Cloud 2.0 to bring the power of autonomous AI agents to cloud security.
Inside Cortex Cloud 2.0
Autonomous Resolution with AI Agents
Picture an exposed storage bucket with sensitive data, a vulnerable container image with an exposed key or an overpermissive role that creates a privileged escalation risk. Instead of tickets and delays, Cortex Cloud links the signals, calculates the blast radius, recommends the least-disruptive fix, and executes. It achieves this in minutes with end-to-end automation, not days.
Driven by autonomy from Cortex® AgentiXTM—trained on more than a billion real-world responses—Cortex Cloud turns analysis into action while keeping you in control. Every step is visible and auditable and aligned with existing roles and permissions.
And scale comes built in. In Cortex Cloud 2.0, common issues are resolved with one-click and ready-to-go playbooks, while natural-language prompts generate new automations that adapt as environments change. The result is a significant drop in MTTR and a backlog that finally disappears.
Secure Cloud Workloads without Impacting Performance
Cloud performance demands minimal resource overhead. Security demands deep visibility and enforcement. Until now, those goals have competed.
Cortex Cloud 2.0 ends the trade-off. Its new, performance-optimized agent delivers best-in-class detection and prevention, identifying threats faster and with greater precision while cutting resource use in half. Powered by the same analytics that correlate data across code, cloud and runtime, it processes telemetry in milliseconds, turning raw signals into immediate, actionable insight.
Teams can protect more workloads without paying a tax in compute or cost, including those once considered too performance-sensitive for continuous monitoring. The agent runs in both full and optimized modes, so protection levels can shift instantly—without a reinstallation or disruption. Teams get stronger protection that sees more, acts sooner, and stays invisible to performance.
Unify and Prioritize Risks Through Reimagined UX
Security leaders want to understand their cloud posture, but that often means jumping between dashboards, stitching together data, and guessing what to fix first.
The Cortex Cloud command centers present your entire cloud security program—coverage, gaps, active threats and recommended actions—on a single, elegant canvas designed for instant comprehension.
From a convenient dropdown menu, each team can choose their domain’s command center. Application security teams see code-level findings through the ASPM Command Center. Cloud security analysts view infrastructure posture and threats in the Cloud Command Center. Every member of your security team sees a consistent source of truth, intuitively laid out and expressed in the language and priorities of their role.
Exemplifying simplicity, the Cortex Cloud command centers streamline how teams move from insights to action. Related security issues that share a single corrective path are grouped in cases and presented in a short list that guides users toward the best fix. Everything sits just a click or two away. People can see their estate at a glance, focus on the right few items, and quickly act without digging for information.
Shift Left Gets Smarter
While preventing risk has always been the ideal, achieving it has never been simple. Most shift-left efforts stop at identifying vulnerabilities in development, leaving teams with long lists of findings and little context, and failing to prevent risks from reaching production.
In Cortex Cloud 2.0, the Application Security Command Center unites signals from code, cloud and runtime into a single view, giving developers precise, actionable guidance before code ever ships. Each recommendation reflects real-world impact, so fixes align with business risk.
Security intelligence appears where developers already work. In popular IDEs and version control systems, Cortex Cloud ASPM surfaces context-rich insights and one-click fixes that close issues early and fast. The result is prevention that fits naturally into existing workflows, without slowing velocity or creativity.
Defining a New Standard in Cloud Security
Cortex Cloud 2.0 breaks down silos and helps enterprises accelerate their cloud security transformations. Every improvement—faster automation, better protection, simpler insight—helps your team act without hesitation.
Cloud innovation won’t slow down. Neither will the threats that follow it. With Cortex Cloud, security isn’t a choice between keeping up and leading the way. It’s already doing both.
Learn More
Cortex Cloud is generally available to customers today, with the new advancements in Cortex Cloud 2.0 available in early 2026. To learn more about the innovations in this release, register for the Cortex Forward Series.
For security leaders evaluating the platform landscape, the CNAPP Buyer’s Guide offers a framework for assessing integration across code, cloud and SOC, including criteria to measure prevention maturity through unified visibility and control.