PAGES
← all tools
◆ CNAPP

Palo Alto Prisma Cloud

2026-08-13-a70faccf commercial

8 more tools, grouped by what they do.

CNAPP

Firewalls & Network Defense

Attack Surface & Exposure Management

Endpoint Security (EDR/XDR)

Secure Access (VPN / SASE / ZTNA)

SIEM

SOAR

Palo Alto Prisma Cloud is a cloud security platform that protects cloud infrastructure, applications, and data across multiple cloud providers.

rss ↗ What is a cyber toolchain?

Summary

Palo Alto Prisma Cloud is a commercial cloud-native application protection platform (CNAPPCNAPPA cloud-native application protection platform that combines checks across cloud configuration, workloads and development. It helps teams connect risks that separate tools might report apart.) run as a SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. service, aimed at cloud security and platform teams responsible for securing infrastructure, workloads, and increasingly AI deployments across an organization. Its recent capabilities extend beyond traditional CNAPP scope into AI security: it discovers and governs agentic AI threats like identity impersonation and tool misuse, runs automated red-team testing against AI deployments, scans third-party models for tampering before deployment, and inspects LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. traffic for prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. and data leakage through a centralized gateway called Prisma AIRS. It integrates directly with developer tools such as OpenAI Codex Enterprise, routing prompts through real-time inspection and extending DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. to code and config snippets. Prisma Cloud has been available since 2007 and remains under active development, with its latest release 45 days old.

Palo Alto Prisma Cloud is a cloud security platform that protects cloud infrastructure, applications, and data across multiple cloud providers.

How Palo Alto Prisma Cloud helps

Which autonomous AI assistants in the organization are impersonating identities or misusing tools they were granted?

continuously monitors agentic AI activity and flags identity impersonation, memory manipulation, and tool misuse across every autonomous assistant in use

Would a real attacker be able to manipulate one of our deployed AI models?

runs an adaptive red-team agent against the deployment that evolves its attack strategy like a live adversary and reports what it was able to break

Is this third-party model safe to deploy?

scans the model file for tampering, malicious scripts, and deserialization attacks before it goes into production

Is sensitive data or a prompt injection slipping through our LLM traffic?

inspects prompt and response traffic through a centralized gateway for injection attempts, data leakage, and indirect prompt injection embedded in referenced content

Are developers leaking proprietary code or credentials through their AI coding assistant?

routes every prompt from the coding tool through real-time inspection and DLP scanning, checking logs, config snippets, and code functions for sensitive data before it reaches the model

Which AI tools and services are actually running across the organization, sanctioned or not?

surfaces them through the AI discovery capability, giving a posture-management view of what is in use before governance is applied

all 8 features, with the evidence for each →

Features

8 capabilities across 6 areas

Built from Palo Alto Prisma Cloud's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What Palo Alto Prisma Cloud offers you

  • Agentless deployment1
AI Security Posture and Discovery 2 capabilities Prisma Cloud identifies AI services and usage across an organisation and governs the posture of AI agents, including their identities and behaviours. This gives teams visibility into what AI is running and whether it is operating within acceptable bounds.
AI Discovery shipped Discovers AI services and usage across the organisation so teams know what AI is active and where. 1 release · first seen Aug 2026

release

  • Adds AI Discovery capability via Cortex AISPM, surfaced as a new documentation area alongside the Codex integration. changelog · Aug 2026 · source · release history
AI Agent SSPM shipped Detects and governs agentic threats such as identity impersonation, memory manipulation, and tool misuse in autonomous AI assistants. 1 release · first seen Jul 2026

release

  • New AI Agent SSPM (SaaS Security Posture Management) detects and governs agentic threats including identity impersonation, memory manipulation, and tool misuse across autonomous AI assistants. changelog · Jul 2026 · source · release history
AI Runtime Protection 2 capabilities Prisma Cloud monitors and enforces security controls on live AI applications, intercepting attacks such as prompt injection and sensitive data leakage as they occur. It also provides a centralised control plane to manage runtime security across all AI cyber tools in the organisation.
AI Runtime Security shipped Monitors LLM-powered applications in real time to detect prompt injection, data leaks, and injection attacks embedded in external content. 2 releases · 1 other source · first seen Jul 2026

release

  • Adds native integration between the Prisma AIRS Runtime API and OpenAI Codex Enterprise, routing all user prompts across an organization through real-time inspection by configuring the Prisma AIRS API key and endpoint inside the Codex Global Admin Console. changelog · Aug 2026 · source · release history
  • New AI Runtime Security protection for LLM-powered apps covers prompt injection, sensitive data leaks, and Indirect Prompt Injection (IDPI) embedded in websites. changelog · Jul 2026 · source · release history

docs

  • Documentation page diff for Palo Alto Networks (https://docs.paloaltonetworks.com/content/techdocs/en_US/ai-runtime-security.html). changelog · Aug 2026 · source
AI Gateway shipped Provides a single control plane that centralises runtime security, data protection, and agent identity controls across all AI cyber tools. 1 release · 1 other source · first seen Jul 2026

Also counts toward: Agentless deployment

release

  • New Prisma AIRS AI Gateway centralizes runtime security, data protection, and agent identity controls across all AI tools in an organization from a single control plane. changelog · Jul 2026 · source · release history

example

  • Enable org-wide Prisma AIRS scanning for all Codex users without client-side agents — useful for security teams who need DLP and runtime threat inspection across an entire developer organization. 1. In the Prisma AIRS management console, generate your API key and endpoint. 2. In the Codex Enterprise Management UI, open the Global Admin Console. 3. changelog · Aug 2026 · source
AI Model and Supply Chain Security 1 capability Prisma Cloud scans third-party AI models for vulnerabilities, tampering, and malicious content before they are deployed into production. This reduces supply chain risk introduced when teams adopt externally sourced models.
AI Model Security scanning shipped Scans third-party AI models for vulnerabilities, malicious scripts, tampering, and deserialization attacks before deployment. 1 release · first seen Jul 2026

release

  • New AI Model Security scanning checks third-party models for vulnerabilities, malicious scripts, tampering, and deserialization attacks before deployment. changelog · Jul 2026 · source · release history
AI Red Teaming and Adversarial Testing 1 capability Prisma Cloud runs automated penetration tests against AI deployments using an agent that adapts its attack strategies to simulate realistic adversarial behaviour. This helps teams find exploitable weaknesses before real attackers do.
AI Red Teaming shipped Runs automated, adaptive penetration tests against AI deployments, evolving attack strategies to simulate real adversarial behaviour. 1 release · first seen Jul 2026

release

  • New AI Red Teaming capability performs automated, adaptive penetration tests against AI deployments using an agent that learns and evolves like a real attacker. changelog · Jul 2026 · source · release history
Data Loss Prevention for AI 1 capability Prisma Cloud inspects inputs sent to AI models — such as prompts, code, logs, and configuration snippets — to prevent proprietary data and credentials from reaching the model. This protects organisations from accidental or deliberate data exfiltration through AI interfaces.
Enterprise DLP for AI inputs shipped Scans developer and user inputs sent to AI models for proprietary data and credentials before the content reaches the model. 1 release · first seen Aug 2026

release

  • Extends Enterprise DLP controls to OpenAI Codex, scanning developer inputs — including logs, config snippets, and code functions — for proprietary data and credentials before they reach the AI model. changelog · Aug 2026 · source · release history
Compliance and Data Residency 1 capability Prisma Cloud provides regional cloud infrastructure to meet data residency requirements for organisations operating under strict data sovereignty rules. This allows customers to keep AI security processing within defined geographic boundaries.
Data residency regions shipped Provides a local cloud region in Japan so that data processed by Prisma AIRS stays within Japanese borders for residency compliance. 1 release · first seen Jul 2026

release

  • New local cloud region in Japan for Prisma AIRS, enabling data residency and low-latency processing for Japanese enterprises. changelog · Jul 2026 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface

Five scores for Palo Alto Prisma Cloud, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Palo Alto Prisma Cloud puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Website history

paloaltonetworks.com, every change

Palo Alto's home page and 36 more pages as they looked each month from September 2021 to October 2026: 48 renders, 6 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

2 entries

  1. August 20261
  3. July 20261

    2 entries

    1. changelog Aug 13, 2026 · issue 044

      Prisma AIRS Runtime API integrates natively with OpenAI Codex Enterprise to scan all developer prompts org-wide in real time.

      └──▷ HOW TO FIND IT
      Enable org-wide Prisma AIRS scanning for all Codex users without client-side agents — useful for security teams who need DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. and runtime threat inspection across an entire developer organization.
      📍1. In the Prisma AIRS management console, generate your API key and endpoint. 2. In the Codex Enterprise Management UI, open the Global Admin Console. 3. Paste the Prisma AIRS API key and endpoint into the Codex configuration fields and save. 4. All user prompts across your organization are now automatically routed through the Prisma AIRS Runtime API for real-time inspection.
      • Adds native integration between the Prisma AIRS Runtime API and OpenAI Codex Enterprise, routing all user prompts across an organization through real-time inspection by configuring the Prisma AIRS API key and endpoint inside the Codex Global Admin Console.
      • Extends Enterprise DLP controls to OpenAI Codex, scanning developer inputs — including logs, config snippets, and code functions — for proprietary data and credentials before they reach the AI model.
      • Adds AI Discovery capability via Cortex AISPM, surfaced as a new documentation area alongside the Codex integration.

      3 details in Everything

    2. changelog Jul 7, 2026 · issue 009

      Prisma AIRS 3.0 adds Japan local cloud region, AI Agent SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications., AI Red Teaming, and expanded model/runtime scanning.

      • New local cloud region in Japan for Prisma AIRS, enabling data residency and low-latency processing for Japanese enterprises.
      • New AI Agent SSPM (SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management) detects and governs agentic threats including identity impersonation, memory manipulation, and tool misuse across autonomous AI assistants.
      • New AI Red Teaming capability performs automated, adaptive penetration tests against AI deployments using an agent that learns and evolves like a real attacker.
      • New AI Model Security scanning checks third-party models for vulnerabilities, malicious scripts, tampering, and deserializationdeserializationTurning stored or transmitted data back into objects a program can use. Unsafe handling of untrusted data can allow unexpected behavior or code execution. attacks before deployment.
      • New AI Runtime Security protection for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-powered apps covers prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools., sensitive data leaks, and Indirect Prompt Injection (IDPI) embedded in websites.
      +1 more show less
      • New Prisma AIRS AI Gateway centralizes runtime security, data protection, and agent identity controls across all AI tools in an organization from a single control plane.

      6 details in Everything

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    compare.md

      Free the public facts, no sign-in Any paid plan all other sections Researcher & Business pricing history and category rank

      my-toolchain — 0 tools

        Betas, release candidates and previews. Turn it off to see final releases only. It also applies to changes you ask for over MCP when you're signed in.
        browse all tools → score card for your toolchain →
        cyber-toolchain / feedback

        Send us feedback