Palo Alto Networks and Microsoft Featured in MITRE ATT&CK Evaluations 2026

Two cybersecurity industry leaders have made significant announcements regarding their participation in the upcoming MITRE ATT&CK Evaluations, marking a notable shift in how major security vendors approach independent testing validation.

Diagram illustrating core features of Palo Alto Networks’ Cortex XDR cybersecurity platform, including threat intelligence, endpoint protection, and automation 

Palo Alto Networks Steps Back After Strong Track Record

Palo Alto Networks, a six-year veteran of the MITRE ATT&CK Evaluations, announced its decision to withdraw from this year’s testing cycle despite achieving remarkable results in previous assessments.

 The company’s Cortex XDR platform delivered unprecedented performance in recent evaluations, achieving 100% technique-level detections without delays or configuration changes.

The decision reflects a strategic pivot toward accelerating platform innovation and addressing evolving customer security challenges.

Palo Alto Networks emphasized that this withdrawal enables their engineering teams to focus resources on critical developments that directly respond to the rapidly changing threat landscape.

Despite stepping away from MITRE testing, Palo Alto Networks maintains its commitment to independent validation through other channels.

The company continues participating in numerous third-party assessments, recently earning an AAA rating and 100% ransomware prevention from SE Labs.

Additionally, Cortex XDR achieved unique dual certification from AV-Comparatives, becoming the only market leader certified in both EDR Detection and Anti-Tampering tests.

Microsoft Defender for Endpoint Baseline template showcases testing scenarios to validate security against adversarial behavior 

Microsoft Follows Similar Strategic Path

Microsoft also announced its withdrawal from the 2026 MITRE ATT&CK Evaluations, citing resource allocation priorities.

The technology giant, which maintains a long-standing relationship with MITRE, expressed gratitude for the organization’s contributions to advancing industry security standards.

Microsoft’s decision allows the company to concentrate fully on its Secure Future Initiative and accelerate product innovation delivery.

This strategic focus aligns with Microsoft’s broader security transformation efforts across its enterprise and cloud platforms.

Both companies emphasized their respect for MITRE’s role in the cybersecurity ecosystem and expressed intentions to maintain collaborative relationships with the organization.

The MITRE ATT&CK Evaluations have historically provided valuable insights for security vendors and customers alike, establishing transparent performance benchmarks across the industry.

These withdrawals highlight evolving approaches to security validation, with major vendors increasingly diversifying their testing strategies beyond traditional evaluation frameworks.

While both companies step away from MITRE testing, they continue demonstrating product capabilities through alternative independent assessments and real-world performance metrics.

The decisions underscore the cybersecurity industry’s dynamic nature, where vendors must balance participation in standardized evaluations against internal innovation priorities and customer-focused development initiatives.

Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.