Content pack
A content pack is a versioned bundle of automation content that a platform installs as one unit. In XSOAR it holds integrations, scripts, playbooks and layouts. Packs make content reusable and shareable, and they are also the main reason XSOAR content is hard to move to another vendor.
What Content pack means
A pack carries metadata that names its version and the platforms it supports. Teams keep packs in a repository and build them with a command line tool.
When you leave a platform, count the packs you actually run. A catalogue of hundreds of packs matters less than the dozen your playbooks call.
Content pack in Palo Alto Cortex XSOAR's own words
An XSOAR content pack bundles integrations, scripts, playbooks, layouts, classifiers and incident and indicator types, and carries pack_metadata.json with a MAJOR.MINOR.REVISION version. Palo Alto Cortex XSOAR documentation, read 2026-11-03