API & Integrations - Palo Alto Networks Cortex XDR - Sep 2025

Service Update

Availability	September 15th, 2025
Product(s)	Email Security Cloud Gateway (CG), Human Risk Command Center
Who's affected	Email Security Cloud Gateway (CG), Administrators

Overview

Mimecast is pleased to introduce the integration between the Human Risk Platform and Palo Alto Networks Cortex XDR. This integration enables organizations to ingest endpoint protection incidents from Cortex XDR into the Human Risk Platform, providing visibility into user interactions with malware and supporting more robust human risk scoring.

What's changing

• Incident Ingestion: The platform now ingests all incidents from Cortex XDR via API, including incident data and associated user information.
• User Mapping: Each incident is reliably linked to the relevant user(s), resulting in accurate risk scoring.
• Availability: This is available to all customers with the Human Risk Command Center, including those on Engage trials and all customers on Mimecast Email Security Cloud Gateway.

Recommended actions

• Administrators must ensure they have the required specific administrative roles with read/write permissions for configuration. Please take a look at the API & Integrations - Palo Alto Networks Cortex XDR documentation for guidance on how to configure this.
• Review your Human Risk Dashboard to familiarize yourself with the enhanced incident and user mapping.

See Also...

• Integrations - Palo Alto Networks Cortex XDR