New Cortex Marketplace integration brings evidence of exploitability into automated remediation and verification workflows
Horizon3, the AI-native proactive security leader, announced the availability of its NodeZero® integration with Palo Alto Networks Cortex XSOAR on the Cortex Marketplace. The integration brings NodeZero’s high and critical findings on security vulnerabilities and other weaknesses into Cortex XSOAR as actionable incidents, helping teams use exploitability evidence to prioritize remediation, orchestrate the work, and return to NodeZero to verify fixes.
Also Read: CIO Influence Interview with Srinivasan Panchapakesan, Chief Platform Officer at Hexaware
Security teams have extensive vulnerability data and powerful automation to orchestrate remediation at scale. What they often lack is evidence showing which vulnerabilities and weaknesses attackers can actually exploit and whether remediation eliminated the underlying risk.
The NodeZero integration for Cortex XSOAR connects those capabilities, bringing pentest evidence into orchestrated remediation. NodeZero autonomously tests environments to identify security vulnerabilities and other weaknesses, map attack paths, and provide evidence of impact and remediation guidance. Cortex XSOAR ingests high and critical open findings identified by NodeZero as incidents. Existing automation and playbooks can then enrich, route, track, and orchestrate remediation. After a fix is implemented, teams can use NodeZero 1-Click Verify to retest eligible findings and determine whether they remain exploitable.
“Organizations have invested heavily in security tools and automation. The opportunity now is to prove those investments are producing better security outcomes,” said Snehal Antani, CEO and co-founder of Horizon3. “By bringing NodeZero’s exploitability evidence into Cortex XSOAR, teams can prioritize what to fix based on what testing revealed, automate remediation, and verify that the outcome changed. It gives leaders evidence that their defenses are working and their security investments are delivering measurable value.”
“Effective security orchestration starts with high-quality inputs,” said Daniele Di Mattia, VP, GTM Strategy & Operations at Palo Alto Networks. “NodeZero adds attacker-validated exploitability context to Cortex XSOAR, helping security teams focus automation and remediation on the weaknesses that matter most. Together, we’re helping customers turn better security context into faster, more informed action through the workflows they already use.”
How the Integration Works: From Proven Exploitability to Verified Remediation
The integration enables a continuous workflow across NodeZero and Cortex XSOAR:
- Find: NodeZero autonomously identifies security vulnerabilities, other weaknesses, and attack paths. High- and critical-severity findings are automatically ingested as actionable incidents, complete with affected asset data, exploitation evidence, and clear remediation guidance.
- Fix: Cortex XSOAR accelerates response by enriching incidents with asset context, routing them to the right teams, and leveraging existing playbooks to automate remediation across security and IT systems.
- Verify: After remediation, teams can use NodeZero 1-Click Verify to retest the finding and confirm whether it is no longer exploitable. Because Cortex XSOAR ingests open vulnerabilities from NodeZero, successfully remediated weaknesses stop returning as open incidents, while weaknesses that remain exploitable continue to surface for action.
- Repeat: Scheduled testing and automated workflows help organizations continually identify exploitable exposures, remediate what matters, and verify outcomes as environments change.
As AI accelerates the speed at which attackers can discover and exploit weaknesses, defenders have less time to respond. Security teams need greater confidence that they are proactively fixing what matters and their remediation efforts are effective. By continuously identifying exploitable attack paths, driving remediation, and verifying that fixes worked, NodeZero and Cortex XSOAR help organizations build continuous resilience through a repeatable Hack, Fix, Verify, Repeat operating model.
Catch more CIO Insights: The Overlooked Security Risk Behind Enterprise AI Rollouts
[To share your insights with us, please write to psen@itechseries.com ]
