Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR)
Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) (Blackpoint Cyber (Blackpoint Holdings, LLC)) and Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) (Palo Alto Networks) are both listed in the Security category of Agent Index. They share no framework tags in our dataset.
| Field |  Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) | |
|---|---|---|
| Vendor | Blackpoint Cyber (Blackpoint Holdings, LLC) | Palo Alto Networks |
| HQ | United States · North America | United States · North America |
| Primary category | Security | Security |
| Also listed in | Security | Security |
| Summary | AI SOC agent inside Blackpoint's managed ITDR service that autonomously contains high-confidence credential attacks on Microsoft 365 and Google Workspace accounts: it suspends the account, forces a password reset, ends active sessions and logs its reasoning, and escalates anything below its confidence threshold to a human SOC analyst. Generally available since July 8, 2026. | Palo Alto Networks' agentic layer for Cortex: prebuilt and custom security agents that investigate and resolve cloud and SOC issues across Cortex Cloud, XSIAM and XDR, with configurable autonomy and approvals. |
| Framework tags (Agent Index) | — | — |
| Frameworks (vendor-claimed) | — | FedRAMP |
| Capabilities / tasks | incident response, threat detection, alert triage, security operations | cloud security, security operations, incident response, workflow automation |
| Pricing (as published) | Not published. The AI SOC Agent is included with all Blackpoint ITDR service tiers at no additional cost (vendor release); ITDR pricing is by quote, mainly sold through MSP partners. | Not published |
| Pricing model | quote | quote |
| Primary source | https://blackpointcyber.com/press/blackpoint-cyber-unveils-new-identity-threat-ai-soc-agent/ | https://www.paloaltonetworks.com/cortex/agentix |
| Last checked | 2026-10-19 | 2026-10-18 |
| Official site | https://blackpointcyber.com/press/blackpoint-cyber-unveils-new-identity-threat-ai-soc-agent/ | https://www.paloaltonetworks.com/cortex/agentix |
Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.
Also in this use case
Other verified listings that share a task tag or use-case group with Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) or Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR). Open a pair page or the use-case table — this is not a ranking.
- Bricklayer AI security agents (agentic platform for the AI security workforce) — Agentic cybersecurity platform that deploys, coordinates and governs teams of role-based and tool-specialist AI agents to triage alerts, investigate incidents, run threat-intelligence and threat-hunting work and track vulnerability remediation inside analyst-approved procedures, with every agent action auditable. · Bricklayer AI security agents (agentic platform for the AI security workforce) pair comparison
- Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) — Oslo-built agentic cloud operations platform whose agents find cloud security and compliance issues, investigate across cloud state and IaC, write the Terraform/Bicep fix, validate it with a plan and policy checks and open a pull request, then verify the fix after it lands. The Compliance Remediation Agent works from Prowler, Security Hub, Defender and Checkov findings against CIS, SOC 2, ISO 27001 and NIS2. Autonomy is set by policy. · Cloudgeni cloud agents (Compliance Remediation, Drift & Import, PR Review and other infrastructure agents) pair comparison
- Command Zero Agent Zero (autonomous security analyst) — Autonomous and AI-assisted SOC investigation platform from Austin, Texas. Its LLM agent, Agent Zero, investigates alerts end to end across identity, endpoint, cloud, email and SaaS, auto-closes routine cases with documented reasoning, and escalates the rest with a replayable chain of evidence for analysts to confirm or override. · Command Zero Agent Zero (autonomous security analyst) pair comparison
- Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) — Zurich-headquartered managed detection and response provider for Microsoft Defender and Sentinel whose ION MXDR service uses a team of AI agents to run autonomous Tier 2-level incident investigations (aggregate telemetry, form and test hypotheses) before handing a step-by-step summary to an Ontinue Cyber Defender. · Ontinue ION MXDR autonomous investigations (agentic AI SOC for Microsoft Defender and Sentinel) pair comparison
Use-case comparisons
- AI SOC and security-analyst agents — 37 listings (Security operations, alert investigation and threat detection)
- Cloud security (CNAPP) AI agents — 8 listings (Cloud and container security posture, exposure and remediation)
Related
- Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) alternatives
- Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) alternatives
- Best security AI agents
More Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace) comparisons
- 7AI agentic security platform vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
- Adaptive Security Agentic Email Security and Phish Triage vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
- Aikido Attack AI Pentesting vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
- AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Blackpoint AI SOC Agent for ITDR (autonomous identity threat containment for Microsoft 365 and Google Workspace)
More Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR) comparisons
- 7AI agentic security platform vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR)
- Abnormal AI Security Mailbox (Abnormal AI for Government) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR)
- Adaptive Security Agentic Email Security and Phish Triage vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR)
- Aikido Attack AI Pentesting vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR)
- AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) vs Cortex AgentiX (agents for Cortex Cloud, XSIAM and XDR)