Executive Summary
In its latest analyst briefing, Palo Alto Networks outlined the next phase of Chronosphere, an observability company it acquired in January 2026. The company is expanding the product, now named Cortex XCOR, around AI-driven observability, with an AI site reliability engineer (SRE) that can autonomously investigate incidents when alerts fire, using telemetry, topology, operational history, runbooks, and other contextual information to determine likely root causes. Cortex XCOR is also broadening the platform via real user monitoring, synthetic monitoring, telemetry optimization, and tighter integration with the rest of the Cortex portfolio.
The individual features are useful, but the larger development is more important. Cortex XCOR reflects a change in what observability platforms are expected to do. The market has spent years helping engineers collect more telemetry, search it faster, correlate signals, and build better dashboards. Now AI creates an opportunity to move beyond helping engineers investigate a problem toward allowing the platform to perform part of the investigation itself.
