The table below describes the features and enhancements introduced in the Cortex Xpanse Expander 2.11 (November 2025) release.
Cortex Xpanse typically upgrades customers over a three-week time frame. Contact customer success to find out your specific upgrade date.
Feature |
Description |
|---|---|
Attack Surface Testing Intrusiveness Levels |
Safely test all your environments by adjusting the intensity of exposure checks. |
AI Infrastructure Detections |
Ensure your visibility keeps pace with innovation by detecting more AI Infrastructure-related items, including MCP Servers, MCP Inspector, and more. |
Service Version Enumeration and Filtering |
Quickly isolate software by name and version in Services to speed investigations and hygiene work. |
Misconfiguration and Enumeration Alerts in Threat Response Center |
Spot active misconfigurations and enumeration activity at a glance and prioritize response from a single view. |
Faster Triage with Bulk Actions |
New bulk actions to help you manage alerts and assets more efficiently. |
Bulk IP Address Paste |
Accelerate your search and triage by pasting large IP address lists into any of the following views
|
Cloud Resource Observation Timestamp Change |
Cortex Xpanse will now take into account domains and IP addresses for First Observed and Last Observed timestamps for cloud assets. |