The features or capabilities of Cortex Cloud by Palo Alto Networks that I have found the most valuable and useful include runtime security and runtime protection. Cortex Cloud by Palo Alto Networks offers the ability to monitor workloads in real time to detect any sort of threats and vulnerabilities. The application security part of the platform is also valuable, as there are very few tools in the market offering this capability, similar to Wiz, which was acquired by Google. The agentless scanning that Cortex Cloud by Palo Alto Networks offers is also something relatively new in the market. Cortex Cloud by Palo Alto Networks has helped reduce manual tasks in security processes for my customers and for me. If a customer needs to create an alert and policy, the platform offers a simple RQL which is similar to SQL queries that customers can use. It is a set of auto-populated language that customers can use to build these queries depending upon what the use case is. The tool is fairly easy to adapt to, and any new customer who does not have experience writing these languages can simply utilize this and create their own queries to monitor their workloads. Any customer without an idea of how cloud functions or security functions work can still make use of it. The tool is quite user-friendly. Cortex Cloud by Palo Alto Networks' AI and automation features in detecting and responding to high-risk threats have been quite good in my opinion. The platform has an AI Copilot integrated with it, which helps for data security protection and has certain AI capabilities to start monitoring with lesser human intervention to detect anomalies. I have not had a lot of hands-on with this feature, but it does a good job. I would rate it as a very good feature from Cortex Cloud by Palo Alto Networks, and I believe it does a fairly good job.
