Cyderes and Palo Alto Networks partner on AI-powered SOC services
Cyderes, the global managed cybersecurity services provider, has announced a partnership with Palo Alto Networks that positions the firm as a premier delivery and implementation partner for the vendor's Cortex security operations platforms. Unveiled at Black Hat USA 2026, the arrangement covers Cortex XDR and Cortex XSIAM deployments across the United States, Canada and UK/EMEA markets, and extends to Palo Alto Networks' Idira identity security product.
The agreement targets enterprise security teams that are running fragmented tooling stacks and facing pressure to consolidate without losing operational visibility. Under the arrangement, Cyderes wraps its managed detection and response (MDR) capabilities and its Meridian entity fabric around the Cortex platforms, offering clients a choice between fully managed and co-managed security operation models.
What the platforms bring
Cortex XDR aggregates telemetry from endpoints, networks, cloud workloads, identity stores and email, building threat context at machine speed. Cortex XSIAM is Palo Alto Networks' unified security data and analytics layer, combining detection, incident management and threat intelligence into a single console. Cyderes says its Meridian fabric accelerates client onboarding and adds entity-level context that it argues reduces alert noise for operations teams.
Chris Schueler, chief executive of Cyderes, said the company chose Palo Alto Networks because it believes "the future of the SOC will be built on AI-driven platforms, deep operational expertise and identity-aware context." Simone Gammeri, chief partnerships officer at Palo Alto Networks, said the partnership is intended to help mutual customers move toward "machine-speed detection and response" while reducing strain on internal security teams.
Neither party disclosed the commercial terms of the arrangement, and no joint customer wins were named in the announcement.
Market context
The managed security services provider (MSSP) market is undergoing rapid consolidation as enterprises seek to reduce the number of point-product vendors they manage. Palo Alto Networks has invested heavily in platformisation as a growth strategy, encouraging customers to collapse multiple security tools onto Cortex and its other product families. Partnerships with delivery specialists such as Cyderes extend that platform reach without requiring Palo Alto Networks to build out its own professional-services bench at scale.
Cyderes competes in a crowded MSSP and MDR field that includes Secureworks, Arctic Wolf, Expel and a number of large systems integrators that resell similar Cortex-based managed services. The identity security angle is notable: the inclusion of Idira reflects growing enterprise demand for unified coverage across endpoint, cloud and identity, particularly as attackers increasingly target identity infrastructure to move laterally and evade perimeter controls.
Regulatory read-across
UK and EMEA coverage brings the partnership into scope for NIS2, the EU's updated network and information security directive, which came into force for member-state operators of essential services from October 2024. Enterprises in regulated sectors procuring managed SOC services under NIS2 are expected to demonstrate that their chosen providers can meet incident-reporting timelines and supply-chain security requirements. Cyderes has not published details of its own compliance certifications in this release, and prospective clients in regulated industries should request evidence of relevant accreditations, such as ISO 27001 and SOC 2 Type II, before procurement.
The forward-looking disclaimer attached to the release, referencing Palo Alto Networks' SEC filings, is standard for a listed company and does not affect the editorial substance of the partnership announcement.