Cortex ITDR
Cortex ITDR: A focused ITDR add-on for detecting identity threats and automating response. Ranked #16 of 25 in Identity Threat Detection and Response Software by our editors (7.6/10); pricing: Pricing on request; best for AD teams needing policy-based response.
At a glance
- Editor score7.6 / 10
- PricingPricing on request
- Best forAD teams needing policy-based response
- Credential theft detectionYes
- Founded2005 · Santa Clara, California, USA
- Facts checked20 Sep 2026
Where it wins
- Detects compromised accounts, privilege escalation, and malicious LDAP queries
- Combines AD posture management with conditional access policies
- Automates asset-role classification and remediation playbooks
Where it doesn't
- Pricing is handled through contact sales
- Available as a web product and Cortex XDR add-on
- Listed integration breadth is narrower than broader ITDR platforms
Our verdict on Cortex ITDR
Cortex ITDR is an identity threat detection and response add-on for Cortex XDR. It is designed for security operations teams that need visibility into identity and authentication activity across human and machine identities. Its coverage includes compromised accounts, privilege escalation, anomalous access, credential theft, directory attacks, and identity-related activity across endpoints, networks, cloud environments, and directory infrastructure. Active Directory teams are a particularly strong fit, especially where policy-based response and directory protection are priorities.
The product combines detection with controls and operational views. User risk views and risk management dashboards help organize identity-related findings, while automated asset-role classification adds context to identities and assets. Active Directory Security Posture Management addresses directory configuration and exposure, and conditional access policies support allow, block, or MFA decisions. Malicious LDAP query detection and blocking adds a focused control for directory attack activity. Automated remediation playbooks extend the product beyond alerting into response workflows.
Cortex ITDR is offered through contact sales and operates as a web product within the Cortex XDR ecosystem. That model may suit organizations already standardizing on Palo Alto Networks security tooling, but teams seeking a standalone product or a broad set of separately listed integrations may prefer an alternative. Choose Cortex ITDR for its combination of identity detection, AD posture management, conditional access, and automated response. Consider other options when independent deployment or wider ecosystem breadth matters more than this focused coverage.
Your product? Our editors can test Cortex ITDR in depth and publish a review, labelled as paid · from $149/mo →
Cortex ITDR pricing
Cortex ITDR fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Credential theft detection | Yes |
| Privilege abuse detection | Yes |
| Directory attack detection | Yes |
| Automated response | Yes |
| Identity coverage | Human_and_machine |
| Data retention | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Support | Phone, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Pricing | Pricing on request |
| Website | paloaltonetworks.com |
| Facts checked | 20 Sep 2026 |
Alternatives to Cortex ITDR
- CrowdStrike Falcon Identity ProtectionBroad hybrid identity defense with detection, enforcement, and automated response.9.4
- AuthMind Advanced Identity Threat Detection and ResponseBroad identity attack-path visibility with detection and automated containment.9.3
- SilverfortBroad identity threat detection and response for hybrid enterprise environments.9.2
See all Cortex ITDR alternatives →
Used Cortex ITDR? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Cortex ITDR for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Cortex ITDR is listed in our Identity Threat Detection and Response Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/cortex-itdr/"><img src="https://www.itechguides.com/best/badge/cortex-itdr.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update