Cortex XDR Agent

Advanced anti-malware protection for your mobile device

Palo Alto Networks · com.paloaltonetworks.trapsa

Not rated yet 10K+ downloads v7.0.0.111 12.4 MB Android 5.0+ PEGI 3 · Everyone

Download APK 12.4 MB All versions

Signature matches the Google Play version Details

At a glance

Latest version: v7.0.0.111 (111)
Updated: Jul 26, 2026 (2 months ago)
APK size: 12.4 MB
Requires: Android 5.0+ (API 21)
CPU support: x86 32-bit, x86 64-bit, ARM (legacy), ARM 32-bit, ARM 64-bit
Category: Business (app)
Listed since: Mar 11, 2021 (at least)
Permissions: 15 (5 sensitive)
Website: paloaltonetworks.com/products/secure-the-endpoint/traps
Developer contact: [email protected]
Privacy: Developer's privacy policy

About this APK

Cortex XDR Agent is an app by Palo Alto Networks in the Business category, listed since at least March 2021. It includes native code for x86 32-bit, x86 64-bit, ARM (legacy), ARM 32-bit and ARM 64-bit, so it runs on practically every phone.

It asks for 15 permissions, 5 of them sensitive, including read phone status and identity, find accounts on the device and read shared storage.

What's new in v7.0.0.111

Changes From Previous Version: * Updated to use Android's native JobService * Improve stability in Huawei devices * Fix server-action scheduling.

Description

From the listing uploaded by “appupdater”.

Cortex XDR for Android is available for existing Palo Alto Networks Cortex XDR customers with an active Cortex XDR or Traps management service subscription. The Cortex XDR app for Android prevents known malware and unknown APK files from running on your Android endpoints. The Cortex XDR app enforces your organization’s security policy to block known malware and unknown files (recommended), upload unknown files for in-depth inspection and analysis, treat grayware as malware, and perform local analysis to determine the likelihood an unknown file is malware. You can also whitelist trusted signers to enable unknown apps that are signed to run before the Cortex XDR app receives an official verdict for the app.

Security & authenticity

Security rating: Trusted

Signing certificate

Signature matches the Google Play version Checked by the source store on Jul 26, 2026.
Certificate issued to “Palo Alto Networks,Inc.” This is the certificate of the Google Play version.

Store checks and file details

Developer signature verified Jul 26, 2026
Validated against Google Play Jul 26, 2026
Signed byCN=Palo Alto Networks, OU=Traps, O="Palo Alto Networks,Inc.", L=Santa Clara, ST=CA, C=US
Signing certificate (SHA-1)8B:D7:C4:19:01:A3:F3:43:9C:63:73:CD:3D:D8:22:BA:8D:F4:1B:42
File MD5f80b1a017809acbfade6540dcb46726c
Uploaded by “appupdater” Gold tier · 117,810 followers · uploading since 2020

Scans and ratings come from the source store; the certificate comparisons are AAPKs's own, made from the files' published signatures. AAPKs doesn't scan files itself — compare the MD5 and signer after downloading.

Permissions (15)

Cortex XDR Agent requests 15 permissions, 5 of them sensitive.

Find accounts on the device Sensitive android.permission.GET_ACCOUNTS
Modify shared storage Sensitive android.permission.WRITE_EXTERNAL_STORAGE
Package usage stats Sensitive android.permission.PACKAGE_USAGE_STATS
Read phone status and identity Sensitive android.permission.READ_PHONE_STATE
Read shared storage Sensitive android.permission.READ_EXTERNAL_STORAGE
Full network access android.permission.INTERNET
Get tasks android.permission.GET_TASKS
Google Play install referrer com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
Kill background processes android.permission.KILL_BACKGROUND_PROCESSES
Prevent the device from sleeping android.permission.WAKE_LOCK
Real get tasks android.permission.REAL_GET_TASKS
Request delete packages android.permission.REQUEST_DELETE_PACKAGES
Run at startup android.permission.RECEIVE_BOOT_COMPLETED
Run foreground services android.permission.FOREGROUND_SERVICE
View network connections android.permission.ACCESS_NETWORK_STATE

Required hardware & features

Basic touch input android.hardware.faketouch

Cortex XDR Agent APK: questions and answers

Can I install this APK over the version I already have?

Yes, if your installed copy is older. It is signed like the Google Play version, so Android installs it as an update and keeps your data.

Is the Cortex XDR Agent APK safe?

No one can promise that a file is safe, but some things can be checked. The source store rates this file Trusted. Its signature matches the Google Play version. After downloading, check that the file's MD5 is f80b1a017809acbfade6540dcb46726c.