Security and data handling

The health check reads

This tool only reads data and never makes changes.

Keys stored for the hosted check

A Cortex API key saved for the hosted health check is encrypted with AES-256-GCM before it is stored.

The checker kit

The checker kit runs on your machine. This site does not put a Cortex API key into that download.

Sign-in codes

A sign-in code is emailed once and stored as a hash. It expires in 10 minutes and works once.

Guide questions

The site stores a chapter id and an outcome for a guide question. If you send the question to the team, the text is saved as a case you can reopen.

Consultation notes

A consultation request stores your name, work email, preferred times, topic, and the deadline. The form asks you to leave out tenant names, keys, and data. The server stores the text you submit.

Guide payment

Guide payment is entered on Stripe Checkout. This site does not show the amount and does not collect the card number.

Independence

Independent educational tool. Not affiliated with or endorsed by Palo Alto Networks. Informational only, not professional advice.

OPTIV + PALO ALTO NETWORKS · CORTEX · FY26
Security | Discovery Lab