Palo Alto Networks WildFire assigns verdicts based on the behavior and security risk of the analyzed samples:

1. Benign: These samples are confirmed as safe and do not exhibit malicious behavior. They do not require any blocking or alerting actions.
2. Grayware: This verdict is for software that does not pose a direct security threat (non-malicious) but may display obtrusive or unwanted behaviors, such as adware, spyware, or browser helper objects (BHOs).
3. Malware: These samples are malicious in intent and can pose a security threat. This category includes viruses, worms, trojans, and rootkits designed to harm the system or network.

Palo Alto Networks TechDocs, "Verdicts" in Advanced WildFire Administration, Section: "Advanced WildFire Concepts".

Quote: "Benign—The sample is safe and does not exhibit malicious behavior."

Quote: "Grayware—The sample does not pose a direct security threat, but might display otherwise obtrusive behavior."

Quote: "Malicious—The sample is malware and poses a security threat."

Palo Alto Networks TechDocs, "WildFire Analysis Concepts" in Cortex XDR Administrator Guide.

Quote: "WildFire delivers verdicts to identify samples it analyzes as safe, malicious, or unwanted (grayware is considered obtrusive but not malicious)."