CORTEX XSOAR MARKETPLACE

The industry’s most comprehensive security orchestration marketplace

Discover. Automate. Transform.

Accelerate Your Security Automation

Cortex XSOAR Marketplace is the premier digital storefront for discovering, exchanging, and contributing security automation playbooks, built into Cortex™ XSOAR. Solve any security use case and scale your use of SOAR with turnkey content contributed by SecOps experts and the world’s largest security orchestration, automation, and response (SOAR) partner community.

Download the solution overview


Check out the largest SOAR community in the world
Check out the largest SOAR community in the world

550+ prebuilt content packs
500+ product integrations


For a list of available integrations and featured content packs, check out our SOAR Ecosystem.


Deploy elegant automation solutions in a matter of clicks

Cortex XSOAR content packs are prebuilt bundles of integrations, playbooks, dashboards, fields, subscription services and all the dependencies needed to support specific security orchestration use cases (see Figure 1).

Subscription Services

Content service offerings

Dashboard Layouts

Curated dashboard views of specific data sets that support key security use cases, playbooks, and integrations

Automation Scripts

Prebuilt integrations with leading security products and technology vendors

Orchestration Playbooks

Prebuilt automated orchestration playbooks for simplified security investigation and response

Technology Integrations

Prebuilt actions that preform functions across the platform and the ecosystem of technology integrations
Figure 1: Content pack components (content packs include one or more of these content types)
  • Deploy packs with a single click to simplify and speed up the adoption of automation.
  • Cortex XSOAR is the only SOAR platform that verifies all free and paid third-party content in the marketplace to be safe for immediate use.
  • Want to learn more about Cortex XSOAR Marketplace?

Featured packs of the month

Each month, we feature two content packs and walk you through how you can use them to improve your security operations

SailPoint

To minimize identity risk and better leverage incidents, Sailpoint has created an integration with Cortex XSOAR to give security teams built in access to their predictive identity platform. This new integration delivers a seamless view of security incidents combined with enhanced identity context to drive automated remediation. This content pack is available in the XSOAR Marketplace now!

SecurityAdvisor

The SecurityAdvisor content pack provides users with the ability to automate security awareness in real-time. The integration between Cortex XSOAR and SecurityAdvisor is designed to enable security teams to automate real-time delivery of relevant security training modules to end-users when an exploit is discovered or an incident occurs. This content pack is available in the XSOAR Marketplace now!

slack community

Join our DFIR Community

Join more than 13,000 incident responders on Slack® to discuss forensics tools, incident response best practices and playbooks.


Featured Blogs

From the blog

Automating Identity Lifecycle Management (ILM)

Cortex XSOAR Identity Lifecycle Management (ILM) helps you automate user provisioning across HR management systems, user management, and authentication tools such as WorkDay, Active Directory, and Okta.

Read now
From the blog

Automated Attack Surface Management with Cortex XSOAR + Expanse

Expanse continuously scans the entire internet for all assets owned by a company, allowing an organization to assess vulnerabilities on an ongoing basis. Integrate the powerful insights from Expanse into your security orchestration playbooks.

Read now
From the blog

Turn Insight Into Action With Coralogix and Cortex XSOAR

Explore the Coralogix integration with Cortex XSOAR to immediately consume and visualize actionable data with a managed ELK stack.

Read now