MCP Security: Cortex XDR One vs Defender [2026]

MCP security stopped being a developer-only checklist item on October 19, 2026. That day Palo Alto Networks launched Cortex XDR One alongside Cortex XDR 6.0, a single console and sensor that treats AI agents, MCP servers, plugins, models and browser extensions as things an endpoint platform must see and control. Ten days later, on October 29, Microsoft declared discovery of local AI agents and their configured MCP servers generally available in Microsoft Defender, with support for more than 50 agents and MCP servers on Windows and macOS.