Lumen Expands Managed Detection and Response Services for Palo Alto Networks to Strengthen Cyber Defense

Powered by Black Lotus Labs, this collaboration helps enterprises detect threats earlier and accelerate response amid an evolving cyber landscape

As cyber threats accelerate and security teams face relentless alert volume, Lumen Technologies (NYSE: LUMN) today announced Lumen Defender℠ Advanced Managed Detection and Response (AMDR) for Palo Alto Networks Cortex XSIAM.

Attackers are increasingly operating earlier in the lifecycle while AI is accelerating threat speed. This expanded service will bring together Lumen’s managed detection and response capabilities and Lumen Defender℠ Threat Feed powered by Lumen’s Black Lotus Labs® network-embedded threat intelligence with Palo Alto Networks Cortex XSIAM AI-driven SOC platform to help enterprises modernize security operations, reduce alert fatigue, and accelerate detection and response so they can identify, contain, and disrupt increasingly complex threats.

"Cyber defense is a speed game, and the network is where threats often show up first," said Lumen’s Chief Technology and Product Officer, Jim Fowler. "With Palo Alto Networks, we’re again raising the bar for security by expanding access to our high-value network threat intelligence and putting it to work through modern, automated operations. As we bring Lumen Defender AMDR to more partners and platforms, more customers can quickly thwart bad actors."

Empowering Customers with Network Embedded Threat Intelligence

A standout feature of this solution is its deep integration of threat intelligence from Lumen’s elite threat research arm, Black Lotus Labs, whose work is trusted by government agencies and industry partners. Unlike traditional threat intelligence that relies on endpoint or log telemetry, the Black Lotus Labs Threat Feed derives insights from activity observed across the Lumen network, providing early visibility into attacker infrastructure and behavior. This network-level visibility enables detection of pre-compromise activity, such as reconnaissance or staging, before attacks reach customer environments.

Black Lotus Labs not only protects Lumen’s network and security solutions, including Lumen Defender AMDR, but also disrupts large-scale cyber campaigns targeting U.S. agencies and global enterprises, ultimately shaping the security posture of the broader market.

"Securing the modern enterprise means eliminating complexity and accelerating time-to-resolution," said Simone Gammeri, Chief Partnership Officer at Palo Alto Networks. "Combining Lumen’s network-level threat intelligence with Cortex XSIAM empowers organizations to proactively defend against sophisticated threats at machine-speed and scale their security operations."

Automated Defense, Accelerated Response, Earlier Visibility

Unifying functions within a single platform, Lumen Defender AMDR for Palo Alto Networks Cortex XSIAM operationalizes intelligence-driven detection, investigation, and response. It is designed to reduce tool sprawl, eliminate console switching, and accelerate incident response through automation and advanced analytics. It also supports both comanaged and fully managed SOC models, enabling organizations to modernize operations without replacing existing security teams.

Lumen Defender AMDR for Cortex XSIAM is designed for:

• Reduced alert fatigue with smart grouping and high-confidence alerts instead of raw signal noise
• Accelerated threat scoping and triaging
• Clear visibility into emerging and pre-compromise activity
• Faster decision-making with relevant threat context
• Standardized evidence-based investigation and response execution
• Less reliance on specialized in-house SOC talent
• Lower day-to-day operational complexity by leveraging agentic workflows
• Increased confidence in ongoing security coverage
• Simplified pricing and operations with fewer tools, contracts, and handoffs

This growing partnership is representative of Lumen’s connected ecosystem strategy, an approach that unites Lumen’s physical network and digital platforms with trusted technology partners to deliver solutions at scale.

To learn more about Lumen Defender℠ Advanced Managed Detection and Response for Palo Alto Networks Cortex XSIAM, visit Lumen Defender AMDR for Palo Alto Cortex XSIAM | Lumen Technologies.

About Lumen Technologies

Lumen is unleashing the world's AI potential. As the trusted network for AI, we ignite business growth by connecting people, data, and applications — quickly, securely, and effortlessly. Lumen’s physical infrastructure, programmable network, and connected ecosystem give enterprises a simpler way to move data from virtually anywhere to anywhere in real-time to support their AI needs. Together, Lumen’s owned fiber backbone and cloud-native control plane provide a differentiated platform for connecting, securing, and operating modern enterprise environments at global scale. From metro connectivity and long-haul data transport to cloud networking, security services, digital platform capabilities, and connectivity orchestration, Lumen meets customers’ needs today and as they build for tomorrow. Lumen and Lumen Technologies are registered trademarks of Lumen Technologies, Inc. in the United States.

Forward-Looking Statement

This press release contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. All statements contained in this press release that do not relate to matters of historical fact should be considered forward-looking statements, including statements regarding management’s expectations with respect to our business, strategy and operations as well as statements identified by words such as "estimates," "expects," "anticipates," "believes," "plans," "intends," "will," and similar expressions. These forward-looking statements are not promises nor guarantees of future results, are based on our current expectations only and are subject to various risks and uncertainties, including those described in our most recent Annual Report on Form 10-K and Quarterly Report on Form 10-Q, as updated in our other filings with the U.S. Securities and Exchange Commission from time to time. Actual results may differ materially from those anticipated by us in these statements due to several factors, including those referenced in our filings with the U.S. Securities and Exchange Commission.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260713680119/en/

Media Contact:

Danielle Spears

Danielle.Spears@Lumen.com

+1 321 256 3854