Horizon3 has announced the availability of a NodeZero integration with Palo Alto Networks’ Cortex XSOAR, now listed on the Cortex Marketplace.
The companies said the integration is designed to bring NodeZero’s high- and critical-severity findings on vulnerabilities and other weaknesses into Cortex XSOAR as incidents, allowing security teams to use exploitability information when prioritising remediation and to retest issues after fixes are applied.
In the release, Horizon3 said security teams often have large volumes of vulnerability data and automation tools, but lack evidence indicating which weaknesses attackers can exploit and whether remediation efforts have reduced risk.
According to the companies, NodeZero autonomously tests environments to identify vulnerabilities and attack paths, then supplies evidence and remediation guidance. Cortex XSOAR ingests open high and critical findings and can use existing playbooks to enrich and route incidents and orchestrate remediation tasks. After changes are made, teams can use NodeZero’s “1-Click Verify” feature to retest eligible findings.
“Organisations have invested heavily in security tools and automation. The opportunity now is to prove those investments are producing better security outcomes,” said Snehal Antani, CEO and co-founder of Horizon3. “By bringing NodeZero’s exploitability evidence into Cortex XSOAR, teams can prioritize what to fix based on what testing revealed, automate remediation, and verify that the outcome changed. It gives leaders evidence that their defences are working and their security investments are delivering measurable value.”
“Effective security orchestration starts with high-quality inputs,” said Daniele Di Mattia, VP, GTM Strategy & Operations at Palo Alto Networks. “NodeZero adds attacker-validated exploitability context to Cortex XSOAR, helping security teams focus automation and remediation on the weaknesses that matter most. Together, we’re helping customers turn better security context into faster, more informed action through the workflows they already use.”
The release positioned the integration as supporting a repeatable “Find, Fix, Verify, Repeat” workflow, with scheduled testing intended to help organisations identify exploitable exposures and confirm remediation as environments change.
The companies said the integration is certified by Palo Alto Networks and available on the Cortex Marketplace.
