Learn about the Cortex XDR agent app for Android-based endpoints.
The Cortex XDR agent app for Android prevents known malware from running on your Android endpoints. The Cortex XDR agent app enforces your organization’s security policy as defined in Cortex XDR. The security policy determines whether to block known malware and unknown files (recommended), uploads unknown files for in-depth inspection and analysis, treats grayware as malware, and performs local analysis to determine the likelihood that an unknown file is malware. You can also add trusted signers to the Allow List to enable unknown apps that are signed to run before Cortex XDR receives an official verdict for the app.
In addition, when a device user shares a URL with the Cortex XDR agent, the Cortex XDR agent app inspects it, and provides an informative analysis of the URL, with details such as verdict, risk level, and the category associated with the URL.
We strongly recommend that you always update your Android devices with the latest version of the Cortex XDR agent app.