Time to Contain

Integration pack

An integration pack is a bundle of connectors, actions and sometimes playbooks for one product or use case, delivered through a vendor marketplace. A count of packs says how much content exists, not how many containment actions work. Check the action list inside the pack you need.

Definition

Some packs are vendor-built and supported, others are contributed by partners or the community. The scorecard counts only actions that the vendor documents itself.

Ask who maintains a pack, how often it updates and what happens to your playbooks when the underlying product changes its API.

Integration pack in Palo Alto Cortex XSOAR's documentation

Palo Alto's Cortex XSOAR product page states 900+ prebuilt integration and automation packs, while its Marketplace page states 850+ product integrations, so two counts exist and neither is dated. vendor claim paloaltonetworks.com, read

The example names a vendor and its own page. A vendor's use of Integration pack may differ from the definition above; the rubric uses the definition on this page.