Demisto

Demisto built a security operations platform that joins orchestration, incident management and hands-on investigation in one place. The product is now sold by Palo Alto Networks as Cortex XSOAR.

What Demisto offers

• Security orchestration — an engine that automates tasks across different security products.
• Incident management — a consistent process for tracking and handling security incidents.
• Interactive investigation — tools that let analysts work through a case alongside automated steps.
• Machine learning assistance — the platform learns from analyst actions to suggest next steps.
• Threat intelligence and workflow automation — described on the current Cortex XSOAR page as part of the product.

Who it works with

The platform is meant for security operations teams that want to shorten response times, standardise how incidents are handled and raise analyst productivity.

Key facts

• Current name: Cortex XSOAR
• Owner: Palo Alto Networks