Cortex Defender
Cortex Defender is the endpoint application that connects supported AI tools and syncs approved activity to your organization's Cortex workspace.
Start using Defender
- Install and connect Cortex Defender with the package supplied by IT or your Cortex team. If it is already installed, sign in with your work account and organization domain.
- On Home, select Add connection and follow your app's setup. Check Supported AI tools for the right surface and platform. Browser sync has its own routing and certificate setup.
- Send a new prompt and open the Atlas overview. Find the matching person, tool and test time. Connected alone does not confirm workspace delivery.
Use Settings for device preferences and workspace identity. Manage connections to repair a source, or pause and stop capture. If a test is missing, follow Troubleshooting.
What Defender captures
Supported, enabled sources can supply prompts and responses, provider/model IDs, timestamps, request status, usage metadata and tool activity. Fields vary by source. Defender does not capture every device action or all network traffic.
Local capture and workspace sync are separate. During a sync interruption, supported activity can still be captured locally and appears in Atlas after sync resumes. Open the app on Home to read Sync status and Health.
For admin and IT
An admin creates your organization, or Chaos Labs creates it for you. IT can deploy to managed macOS and Windows devices or headless Linux hosts. For a shared gateway, use Egress Gateway on Kubernetes and connect an app or AI tool.