Lumen and Palo Alto Networks launch network threat integration

Lumen Technologies launched a network threat intelligence integration with Palo Alto Networks, embedding Lumen Defender AMDR into Cortex XSIAM to accelerate triaging and reduce signal noise. The partnership aims to combat threat fatigue through AI-driven automation and hybrid human/AI security management.

Lumen Technologies launched a network threat intelligence integration with Palo Alto Networks. The Lumen Defender Advanced Managed Detection and Response AMDR is designed for Palo Alto Networks Cortex XSIAM security operations center SOC suite, with threat intelligence courtesy of Lumen research arm Black Lotus Labs. Lumen touted accelerated triaging and network-level visibility enabling detection of reconnaissance or staging activity to thwart attacks. This comes with a reduction of signal noise to reduce threat fatigue of the sort being galvanized by AI-driven automation With Lumen Defender’s integration into Cortex, Lumen claimed to be reducing tool sprawl and console switching, while supporting co-managed and fully managed SOC model types. This extends to human/AI hybrid management by leveraging AI agents on security duties, helping to reduce both operational complexity and reliance on specialized in-house SOC talent. “Cyber defense is a speed game and the network is where threats often show up first,” Jim Fowler, CTO and chief product officer at Lumen, noted. “With Palo Alto Networks, we’re again raising the bar for security by expanding access to our high-value network threat intelligence and putting it to work through modern, automated operations. As we bring Lumen Defender AMDR to more partners and platforms, more customers can quickly thwart bad actors.” “Securing the modern enterprise means eliminating complexity and accelerating time-to-resolution,” Palo Alto Networks Chief Partnership Officer Simone Gammeri added. “Combining Lumen’s network-level threat intelligence with Cortex XSIAM empowers organizations to proactively defend against sophisticated threats at machine-speed and scale their security operations.” Lumen's shared history with Palo Alto dates back to when the former was known as CenturyLink, with a 2018 integration https://www.sdxcentral.com/news/centurylink-combines-managed-palo-alto-networks-firewalls-threat-detection-and-visibility/ into CenturyLink's Security Log Monitoring service. More recently, Lumen expanded its security footprint in Asia-Pacific with a Cortex XSIAM specialization in Singapore https://ir.lumen.com/news/news-details/2025/Lumen-Technologies-expands-APAC-cybersecurity-capabilities-in-collaboration-with-Palo-Alto-Networks--2025-CS7q8Ldt6S/default.aspx , becoming a NextWave endorsed partner of Palo Alto's in the region.