# Introducing Cortex Cloud ## Bringing together best-in-class CDR with the next version of Prisma Cloud's leading CNAPP for real-time cloud security. ### Rapid innovation leads to shadow cloud deployments, leaving security blind spots. Attackers can discover and exploit internet exposures before security teams even know about them. ### Learn how to secure internet exposure risk. [Download the whitepaper](https://start.paloaltonetworks.com/cloud-discovery-exposure-management.html) ### Internet-accessible exposure risk is a serious blind spot. According to Palo Alto Networks research, on average, 30% to 40% of an organization's publicly accessible attack surface is unknown — leaving security teams with unknown risks they cannot mitigate. ### Internet exposures leave the doors open for attackers. Threat research from Palo Alto Networks discovered that attackers start scanning for vulnerabilities within minutes of most published remote code execution exploits. By exploiting internet-accessible cloud assets such as storage buckets, attackers can access your most valuable data. ### Standalone CSPM tools lack external visibility. Cloud Security Posture Management (CSPM) tools provide an inside-out view of cloud assets, but they can’t provide an outsider’s view. Palo Alto Networks research found that on average, companies add 3.5 new publicly accessible cloud services per day. Having both internal and external risk visibility can help organizations combat shadow clouds and modern threats. ## Combat Shadow Cloud Deployments with Cloud Discovery and Exposure Mitigation Prisma Cloud accurately discovers and attributes internet exposed assets deployed across AWS, Microsoft Azure and Google Cloud (GCP). Security teams can investigate and communicate risk to application owners to remediate internet exposure risks. Prisma Cloud provides native workflows to convert unmanaged assets into managed assets protected by CSPM capabilities. Cloud Discovery and Exposure Management capabilities are backed by the industry leader in attack surface management: Cortex® Xpanse™. - Discover unknown internet-exposed cloud assets. - Evaluate internet exposure risks across clouds. - Easily onboard unmanaged assets to Prisma Cloud for security compliance and governance. [Download the whitepaper](https://start.paloaltonetworks.com/cloud-discovery-exposure-management.html) - External asset discovery - Exposure risk assessment - Onboard assets and remediate risk ## Our Approach to Cloud Discovery and Exposure Management ### External Asset Discovery Tackle security blind spots by leveraging an outside-looking-in view into your environment to find rogue internet-exposed cloud assets that security teams are unaware of. Cloud discovery and exposure management (CDEM) leverages attack surface management technology powered by Cortex Xpanse within Prisma Cloud, so security teams can locate rogue cloud assets. By taking an outside-looking-in view into your environment security teams can now discover a complete asset inventory by combining these unmanaged assets with assets already managed by Prisma Cloud. - #### Visibility into rogue cloud assets Discover unknown or unmanaged cloud assets that are exposed to the internet. Get details such as: exposed services (eg. https, RDP, FTP, Databases), asset owner details, geo location, service certificates and more. - #### Continuous monitoring Track all internet-exposed cloud assets across cloud environments. Quickly understand asset inventory trends such as growing and shrinking unmanaged exposures over time. - #### Multicloud coverage Identify cloud assets across AWS, Azure and GCP that are not under Prisma Cloud management. - #### M&A exposure risk evaluation Improved and informed security posture pre- and post- mergers and acquisitions. ### Exposure Risk Assessment Assess internet exposure risk by understanding what your environment looks like from an attacker's point of view and how vulnerabilities can be exploited. - #### Remote access weaknesses Detect exploitable vulnerabilities and misconfigurations that help gain privileged access to your environment, including remote desktop protocol (RDP), insecure open SSH, LDAP and more. - #### Developer infrastructure and applications Identify exposure risk across critical systems such as web applications and Kubernetes APIs. - #### Data loss prevention Spot publicly exposed databases and insecure file sharing services such as unencrypted FTP servers, server message block (SMB), unclaimed S3 buckets, and more. ### Onboard Unmanaged Assets and Remediate Risk Secure your cloud environment by leveraging the industry leading Prisma Cloud. Easily onboard unmanaged assets to Prisma Cloud for visibility and control over your cloud security posture. - #### Bring rogue cloud assets into Prisma Cloud management Convert unmanaged assets to managed assets with a simple workflow. - #### Reduce internet exposure risk See misconfigurations that enable internet exposures and remediate risk using cloud security posture management capabilities. - #### Monitor security posture Get continuous monitoring of cloud security posture with the best-in-class Prisma Cloud platform. ## Valuable Resources ### Infrastructure as Code Security [Read more](https://www.paloaltonetworks.com/resources/datasheets/infrastructure-as-code-security) ### Raising the Bar for Web App and API Security [Read more](https://www.paloaltonetworks.com/resources/whitepapers/raising-the-bar) ### Cloud Discovery & Exposure Management [Download](https://www.paloaltonetworks.com/resources/datasheets/tip-sheet-cloud-discovery-exposure-management)