Palo Alto Networks: Coveo's SOC Transformation with Cortex XSIAM

Name: Palo Alto Networks: Coveo's SOC Transformation with Cortex XSIAM
Uploaded: 2026-07-12T06:56:31-04:00
Duration: 1 min 49 s
Description: In the high-stakes world of AI search, Coveo isn't just pushing the limits of innovation—they are redefining how security teams scale. As one of the biggest AWS spenders in Canada, Coveo faced a critical challenge: a massive sprawl of cloud assets and...

Palo Alto Networks

07/12/2026

0 (0%)

Report Like Favorite

TL;DR

Coveo consolidated fragmented security tools into Cortex XSIAM, eliminating analyst context switching and achieving 99% ticket close rate with zero backlog
Data ingestion scaled 3,000% from 20GB to 600GB daily while maintaining low false positive rates and reducing analyst onboarding from 12 months to 3 months
Agentic AI enables natural language playbook creation, shifting analysts from manual scripting to strategic work and delivering cost savings through unified cloud-to-workstation visibility

Summary

Coveo, a major AWS customer in Canada focused on AI search innovation, faced significant security operations challenges due to massive cloud asset sprawl and a fragmented security tooling environment. The company's security analysts struggled with constant context switching across multiple systems, creating operational inefficiencies and extended onboarding timelines. By consolidating their security stack into Palo Alto Networks Cortex XSIAM, Coveo achieved dramatic operational improvements including a 3,000% increase in data ingestion (from 20GB to 600GB daily) while maintaining low false positive rates, reduced analyst training time from 12 months to 3 months, and achieved a 99% ticket close rate that eliminated their backlog. The integration of Cortex Cloud provides unified visibility from cloud infrastructure to workstations, delivering both operational efficiency and cost savings. The platform's Agentic AI capabilities enable analysts to build playbooks using natural language rather than manual scripting, fundamentally transforming how the security team operates and allowing them to focus on higher-value work beyond routine alert triage.

Chapters

0:00 - Coveo's Innovation Challenge
0:20 - Context Switching Problem
0:42 - Operational Improvements
1:10 - Agentic AI Transformation

Key Quotes

0:28 "So we decided to have an approach where we're going to spend a bit more on great tooling that is efficient, low and false positive, and that gives us great insight into our assets rather than just trying to hire a ton of people with kind of worse tools."
0:59 "We have actually moved on from ingesting 20 gigs of data a day, which is pretty small, to ingesting over 600 gigs of data a day, and still keeping a fairly low amount of noise."
1:25 "We go from scripting to essentially building playbooks just through natural language rather than having to understand all of the underlying bits and pieces."

FAQ

How did Cortex XSIAM help Coveo reduce analyst onboarding time?

By consolidating multiple security tools into a single unified platform, Coveo reduced the learning curve for new analysts from 12 months to 3 months, eliminating the need to train on numerous disparate systems.

What operational improvements did Coveo achieve with Cortex XSIAM?

Coveo achieved a 99% ticket close rate eliminating their backlog, scaled data ingestion from 20GB to 600GB daily (3,000% increase) while maintaining low false positives, and gained unified visibility from cloud to workstation with cost savings.

Categories:

» Cybersecurity » Cloud Security
» Data Protection

Tags:

Show more Show less

TL;DR

Summary

Chapters

Key Quotes

FAQ

Becoming Agent Ready with Cyera: Essential Strategies and Insights

Verge.io: Can You Afford Your Next Storage Refresh?

Summer of Satori: FunFoneFarm's Transformation of Fraud into Seamless Integration

Invisible Data: Understanding What Needs Protection

Embracing AI Adoption While Maintaining Robust Security Measures