About Automation

Cisco XDR Automation provides a no-to-low code approach for building automated workflows. These workflows can interact with various types of resources and systems. With Automation, you can leverage Cisco and third-party multi-domain systems, applications, databases, and network devices in your environment to create workflows.

• Automate - Eliminate repetitive tasks that waste valuable time.
• Investigate - Reduce time to investigate by automating data collection and incident generation.
• Respond - Create automated responses that can combine multiple products into one action.
• Integrate - Bring products and services together in new ways to multiply their effectiveness and address emerging threats.

View the Cisco XDR Automation Overview video for more information.

Benefits

Cisco XDR connects our Cisco Secure portfolio and your infrastructure, creating an integrated and open security platform.

Automation empowers you to:

• Simplify and streamline common tasks across all IT domains.
• Harness automation to decrease human error.
• Investigate security events with machine-like speed using pre-built and custom workflows.
• Integrate Cisco and third-party systems to expand your security toolbox.

Note:

• All third-party integrations require the Cisco XDR Advantage or Cisco XDR Premium licensing tier. For more information on the licensing tiers, see Cisco XDR Licenses.
• There are select third-party integrations that are supported with the Cisco XDR Essentials licensing tier; see Third-Party Integrations and Supported Capabilities.
• You can view your organization's licensing tier on the My Account page. If your organization's licensing tier is Cisco XDR Essentials, a message is displayed at the bottom of the Integrations page with additional information on how to upgrade the license.