Horizon3 announced the official launch of its NodeZero integration on Palo Alto Networks Cortex XSOAR today. This strategic integration brings high and critical vulnerability findings directly into the Cortex Marketplace. Security operations teams can now transform exploitability evidence into automated remediation and verification workflows immediately.
Modern security teams manage vast amounts of vulnerability data across enterprise networks daily. However, practitioners often lack evidence showing which weaknesses attackers can actually exploit. The NodeZero integration for XSOAR connects autonomous penetration testing data with existing IT playbooks. NodeZero identifies security vulnerabilities, maps complex attack paths, and provides clear evidence of actual business impact.
Cortex XSOAR ingests high and critical open findings identified by NodeZero as actionable incidents. Existing security automation can then enrich, route, track, and orchestrate critical remediation work. Once engineers implement a fix, teams trigger NodeZero 1-Click Verify to confirm the vulnerability is gone.
“Organizations have invested heavily in security tools and automation. The opportunity now is to prove those investments are producing better security outcomes,” said Snehal Antani, CEO and co-founder of Horizon3. “By bringing NodeZero’s exploitability evidence into Cortex XSOAR, teams can prioritize what to fix based on what testing revealed, automate remediation, and verify that the outcome changed. It gives leaders evidence that their defenses are working and their security investments are delivering measurable value.”
“Effective security orchestration starts with high-quality inputs,” said Daniele Di Mattia, VP, GTM Strategy & Operations at Palo Alto Networks. “NodeZero adds attacker-validated exploitability context to Cortex XSOAR, helping security teams focus automation and remediation on the weaknesses that matter most. Together, we’re helping customers turn better security context into faster, more informed action through the workflows they already use.”
Streamlining Security Workflows from Exploitability to Verification
The platform integration creates a continuous cycle across four operational phases: Find, Fix, Verify, and Repeat. First, NodeZero autonomously tests environments and maps exploitable attack paths. Next, XSOAR ingests critical findings along with asset data and remediation guidance.
Next, XSOAR adds asset context to the incidents to speed up the response within the organization. XSOAR assigns relevant tasks to the correct technical teams and uses playbooks to automatically fix issues in the IT infrastructure. Once the issue is resolved, security teams perform NodeZero 1-Click Verify on the identified issue.
The remediated problems will no longer appear as open problems in the management portal of XSOAR. active voice
However, unresolved problems will continue to recur until teams address their root causes. The team plans to conduct testing to ensure that ongoing changes to the corporate network environment mitigate security risks.
With advances in technology, artificial intelligence is making cyberattacks happen more quickly. It is important for security teams to be certain about whether the risks being managed are real. The combination of NodeZero and XSOAR can help enterprises become resilient using a consistent process. Eventually, teams can manage all security issues through the XSOAR platform.
For related updates on digital trust and cybersecurity, explore our SOC News.
