Cortex XDR for Android is available for existing Palo Alto Networks Cortex XDR customers with an active Cortex XDR or Traps management service subscription.
The Cortex XDR app for Android prevents known malware and unknown APK files from running on your Android endpoints.

How does it work?
The Cortex XDR app enforces your organization’s security policy to block known malware and unknown files (recommended), upload unknown files for in-depth inspection and analysis, treat grayware as malware, and perform local analysis to determine the likelihood an unknown file is malware. You can also whitelist trusted signers to enable unknown apps that are signed to run before the Cortex XDR app receives an official verdict for the app.

Cortex XDR uses an accessibility service to protect you from malware applications. It detects when a malicious application is launched, and will prompt you to stop using our local database. Configuring is as simple as enabling the Malware Monitoring Service (Settings > Accessibility > Malware Monitoring Service > Enable). Cortex XDR does NOT record any of your app usage statistics.