About Managed Security - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Prevent Administrator Guide

Cortex XDR
Creation date
Last date published
Administrator Guide

Learn about the use of managed security in Cortex XDR.

Cortex XDR supports pairing multiple Cortex XDR environments with a single interface enabling Managed Security Services Providers (MSSP) and Managed Detection and Response (MDR) providers to easily manage security on behalf of their clients.

Pairing an MSSP/MDR (parent) tenant with a client (child) tenant requires a separate Cortex XDR license for the parent tenant. To ensure bidirectional tenant access between the parent and child, both need to approve the pairing from within the Cortex XDR app.

Once pairing is approved, Cortex XDR resets the child data and synchronizes the security actions configured in the parent tenant, enabling you to view and investigate Cortex XDR data of a child tenant, and initiate security actions on their behalf.