Cortex Versions

Every Cortex product ships on one quarterly release train and stamps its own number on it. A content pack records the underlying server version in its fromversion — so 8.15.0 is the release sold as Cortex XSIAM 3.6, Cortex XDR 5.2 and Cortex Cloud 2.2 alike.

From Version = Cortex XSOAR Cortex Platform Cortex XSIAM Cortex XDR Cortex Cloud AgentiX Released
8.15 1.6 3.6 (2.11) 5.2 2.2 1.4 July 20, 2026
8.14 1.5 3.5 (2.10) 5.1 2.1 1.3 May 03, 2026
8.13 1.4 3.4 (2.9) 5.0 2.0 1.2 January 25, 2026
8.12 1.3 3.3 (2.8) 4.3 1.3 1.1 November 09, 2025
8.11 1.2 3.2 (2.7) 4.2 1.2 1.0 July 20, 2025
8.10 1.1 3.1 (2.6) 4.1 1.1 April 27, 2025
8.9 1.0 3.0 (2.5) 4.0 1.0 February 02, 2025
Where the unified Cortex platform starts — XSIAM 3.0, XDR 4.0 and Cortex Cloud 1.0 are all this one release.
8.8 2.4 3.12 September 22, 2024
8.7 2.3 3.11 June 30, 2024
8.6 2.2 3.10 April 14, 2024
8.5 2.1 3.9 February 11, 2024
8.4 2.0 3.8 October 29, 2023
8.3 1.5 3.7 July 09, 2023
8.2 1.4 3.6 April 23, 2023
8.1 January 01, 2023
8.0
Not a release. The content SDK's floor for “XSOAR 8 SaaS or the Cortex platform, any version”, so an item that declares it means only “not XSOAR 6”.
6.14 February 09, 2025
The last Cortex XSOAR 6 release.
6.13 August 18, 2024
6.12 September 03, 2023
6.11 April 23, 2023
6.10 1.3 December 05, 2022
The XSIAM content baseline: modeling rules, parsing rules, correlation rules and XSIAM dashboards all default to it, and most of the corpus still declares it.
6.9 August 08, 2022
6.8 May 30, 2022
6.6 February 23, 2022
6.5 December 06, 2021
Generic objects and lists date from here.
6.2 June 08, 2021
6.1 February 15, 2021
6.0 July 21, 2020
Marketplace and Threat Intel Management arrive; the floor for a pack to be installable at all.
5.5 April 01, 2020
The first release under the Cortex XSOAR name.
5.0
Before the Cortex XSOAR rename, and the oldest version the content SDK supports.
3.3
Before the Cortex XSOAR rename.

Where this comes from

Palo Alto Networks publishes no single table mapping these to each other. The rows above are assembled from the Cortex XSOAR 6 and XSOAR 8 SaaS release-note indexes, the quarterly “what’s new in Cortex” release posts (which name the products together), and the Broker VM compatibility tables (which list one build and one date against the XSIAM, XDR and Cortex Cloud columns at once). It is maintained by hand here, and it is not an official source.

Cortex XSIAM is listed under both of its live numbering schemes — 3.x, used since February 2025, and the 2.x the content repository never stopped using — because release notes in the wild still use either.