Start here

One checker. Four ways to run it. The check id, the severity weight, and the maturity level stay the same on every rung.

Included

Includes a 2-hour consultation with our engineers, booked within 30 days

The same score

The catalog scores a pass, a warning, or a fail from 0 to 100. HIGH counts as 3, MEDIUM as 2, and LOW as 1. A manual check, and a check marked needs engineer review, is not scored.

Maturity moves in this order: Foundation, Visibility, Detection, Response, Optimization. A later level waits until the earlier one is in place.

Paste a query and read it now?

Start at rung 1. Copy the query for that check.

Keep the same check running on a dashboard?

Use rung 2. It is the same query, on a schedule.

Ask in chat, or run a script on your machine?

Chat is rung 3. A script you run yourself is rung 4. Both use the same check id.

The rest of this chapter, including the queries and the checker steps, is in the guide.

Get the guide

OPTIV + PALO ALTO NETWORKS · CORTEX · FY26
Sample chapter | Discovery Lab