Palo Alto Networks introduced a new AI-driven observability platform last week that autonomously investigates issues and suggests fixes, achieving a 75% success rate in root cause analysis for complex production environments in under three minutes on average. Cortex XCOR, built by the recently acquired Chronosphere team, represents a shift away from static dashboards and manual incident response toward AI agents that handle both routine and intricate investigations without human intervention. The company stated that foundational scale and cost challenges of cloud-native architectures previously prevented this level of automation, and pre-AI-boom tools were too slow.
The platform's AI SRE agent triggers automatically when an alert fires and completes its investigation in under three minutes on average, according to Martin Mao, SVP and GM of observability at Palo Alto Networks. Beyond the 75% success rate for root cause analysis, an additional 19% of incidents produced analysis deemed useful. By comparison, manual responses can take 20 minutes just to locate relevant issues, gather initial context, and find the right on-call engineer. A BairesDev Dev Barometer analysis cited in the report suggests that 42% of developers now report that AI writes at least half their code, up from 12% last year. The platform includes XCOR Operator, an AI assistant designed to help operations teams match AI-coding velocity with contextual relevance by understanding user intent and serving as the conversational interface for specialized agents executing behind the scenes.
Mao told The New Stack that when an alert fires, Cortex XCOR automatically triggers a specialized agent that autonomously reasons through underlying issues and recommends actions and mitigations. "We don't want to keep waking engineers up in the middle of the night to help them make sense of dashboards; to be clear… we don't want to wake them up at all," Mao said. While XCOR defaults to a human-in-the-loop model, engineering leaders can expand its autonomous permissions over time. The report notes that Mao was "blown away by XCOR Operator's ability to solve tough problems that went far beyond my initial expectations," adding that it "caused me to fundamentally rethink how we design products." Palo Alto Networks acquired cloud-native observability platform Chronosphere in January to develop real-time agentic remediation, and announced in July its intent to acquire high-fidelity Real User Monitoring firm Embrace to deliver a full-stack platform.
The report explains that as technologies like XCOR proliferate, the role of the site reliability engineer will likely evolve beyond dashboard work, with automation targeting routine root cause analysis and troubleshooting. Mao compared SREs to airline pilots who can rely on autopilot for smooth flying but still need an experienced pilot in the cockpit when something goes wrong, with automation freeing up time for more strategic architectural work instead of firefighting. The platform's automated reasoning depends on complete end-to-end visibility and context, provided by the XCOR Fabric technology that gives AI agents real-time application, infrastructure, and institutional context drawn from the organization's knowledge graph, operational memory, user behavior, and human knowledge from runbooks and documentation. The report warns that the worst-case scenario without this observability advantage is engineers spending 100% of their time firefighting instead of innovating, leading to massive burnout that the increasing presence of AI-generated code only exacerbates. Mao noted that as users build trust in the analysis and increasingly automate remediation, the company will focus on reducing response time, with cost and the steady decline in token prices as important factors. The automation challenge extends beyond speed to economics: organizations face telemetry volumes skyrocketing from cloud-native and AI workloads, requiring built-in discipline to ensure total visibility without runaway costs, which is why data optimization and cost effectiveness remain central to XCOR's mission, according to the report.