Scan re-evaluation process - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-11
Category
Administrator Guide

After the initial scan has been completed, the scan re-evaluation process ensures that container images remain secure over time without requiring a full re-scan.

Instead of manually triggering new scans, the scan re-evaluation process automatically reassesses existing scan results every 24 hours using the latest threat intelligence feeds. This approach reduces the need for resource-intensive re-scans, while maintaining up-to-date security assessments.

By continuously monitoring container images for emerging threats, you can proactively mitigate risks and ensure compliance with security best practices.