About Managed Security - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM supports pairing multiple Cortex XSIAM environments with a single interface enabling Managed Security Services Providers (MSSP) and Managed Detection and Response (MDR) providers to easily manage security on behalf of their clients.

Pairing an MSSP/MDR (parent) tenant with a client (child) tenant requires a separate Cortex XSIAM license for the parent tenant. To ensure bidirectional tenant access between the parent and child, both need to approve the pairing from within the Cortex XSIAM app.

Once pairing is approved, Cortex XSIAM resets the child data and synchronizes the security actions configured in the parent tenant, enabling you to view and investigate Cortex XSIAM data of a child tenant, and initiate security actions on their behalf.