Palo Alto Networks® (NASDAQ: PANW), a global leader in cybersecurity, today announced the launch of Cortex® Cloud™ Application Security Posture Management (ASPM), a new module designed to prevent security issues in applications before they go into production. This solution enables security and development teams to identify and fix risks faster, more efficiently, and cost-effectively, with performance up to ten times better than traditional approaches.
Cortex Cloud ASPM integrates within the unified Cortex Cloud platform, which already combined leading capabilities in cloud-native application protection (CNAPP) and cloud detection and response (CDR). With this addition, the company strengthens its comprehensive security offering, providing full visibility across the entire application lifecycle, from code to cloud and security operations centers (SOCs).
One of the key innovations is the ability to consolidate data from third-party code scanners—such as Black Duck, Checkmarx, GitLab, HashiCorp, Semgrep, Snyk, and Veracode—within a single platform, without requiring developers to change their usual tools. This integration with a broad ecosystem of AppSec partners allows for correlating findings with complete context from code, cloud, runtime, and business perspectives.
Highlighted benefits of Cortex Cloud ASPM include the ability to proactively prevent risks, prioritize real vulnerabilities over false positives, and automate problem resolution to reduce manual work for security and development teams.
Sarit Tager, Vice President of Product Management at Palo Alto Networks, stated, “With an industry-leading CNAPP, top-tier CDR, and now an ASPM focused on prevention, Cortex Cloud offers the most comprehensive approach to cloud security, automatically stopping risks before they reach production.”
According to Katie Norton, an IDC researcher specializing in DevSecOps and software supply chain security, “Risks in production remain an ongoing threat to organizations. Palo Alto Networks’ approach helps focus on real risks and accelerates response to emerging threats.”
Cortex Cloud ASPM is currently in early access, with general availability expected in the second half of 2025.