Lakera vs Prisma AIRS
Side-by-side comparison of framework coverage, pricing, capabilities, and target customers. Last checked October 2026.
https://aicompliancevendors.com/compare/lakera-vs-prisma-airsLakera
The leading security platform to secure your AI future.
Lakera is a Zurich-based AI security company founded in 2021 by former Google, Meta, and aerospace engineers. The company provides the Lakera Guard platform, which offers real-time prompt injection prevention, data leakage protection, jailbreak detection, and AI agent security for enterprise generative AI deployments. It operates across workforce AI security, AI agent security, and AI red teaming, with sub-50ms runtime latency and a SaaS-first, API-first architecture. Lakera is the creator of Gandalf, a widely used AI security educational game with over 1 million players and 80M+ prompts collected, which provides a continuously updated threat intelligence database. The company is cited in the OWASP LLM and GenAI Security Landscape Guide 2025, recognized as a Representative Vendor in the 2024 Gartner Innovation Guide for Generative AI (TRiSM), and had Lakera's CEO join the World Economic Forum 2024 alongside Yann LeCun and others. Named customers include Dropbox and a top-3 US bank.
Prisma AIRS
Palo Alto Networks' AI security platform, built with Protect AI: model scanning, AI red teaming, posture management, runtime and agent security
Prisma AIRS is Palo Alto Networks' platform for securing AI applications, agents, models and data. Palo Alto Networks launched it on April 28, 2025, the same day it announced its intent to acquire Protect AI, a Seattle AI security company, and completed that acquisition on July 22, 2025. Prisma AIRS 2.0, released October 28, 2025, "completes the native integration" of Protect AI, and Protect AI's chief executive, Ian Swanson, joined as VP, Product, Prisma AIRS. The protectai.com site now redirects to the Prisma AIRS page, and the README of Protect AI's open-source LLM Guard library says the project has been archived. Palo Alto Networks was incorporated in 2005 and is based in Santa Clara; this profile lists the company's founding year and headquarters, as the directory does for other big-company products. Palo Alto's fiscal 2026 annual report lists six parts: AI Gateway, Agent Security, AI Red Teaming, AI Runtime Security, AI Model Security (labeled AI Supply Chain Security on the current product page) and AI Posture Management. AI Runtime Security comes in two forms. API Intercept is called from application code through a REST API to scan prompts and model responses. Network Intercept inspects cloud network traffic inline and is managed from Strata Cloud Manager or Panorama. The platform supports AWS, Azure, Google Cloud, Kubernetes, private clouds and on-premises infrastructure. AI Red Teaming tests agentic and non-agentic systems with a library of more than 500 attack vectors across 50+ techniques and produces a risk score. AI Model Security scans models for tampering, malicious code, data poisoning, architectural backdoors and unsafe serialization formats. **Agent security** The product page now adds Agent Identity Security and Agentic Endpoint Security. Palo Alto completed its acquisition of Koi, which adds agentic endpoint security, in April 2026. On May 29, 2026 it completed its acquisition of Portkey, whose gateway becomes the core AI Gateway for Prisma AIRS: it routes, monitors and secures traffic between agents and models. **Frameworks** Palo Alto maps AI Red Teaming attacks to the OWASP Top 10 for LLMs, MITRE ATLAS and what it calls the NIST Risk Management Framework. We found no documented support for the EU AI Act or ISO 42001. **Who it's for** Enterprises, especially existing Palo Alto Networks customers on Strata Cloud Manager, that want model scanning, red teaming and runtime protection funded from the same credit pool as their software firewalls.
What the data shows
We haven't published an editorial verdict on this pair yet. The comparison below is built from public vendor materials and our taxonomy — no editorialized ranking.
- Shared framework coverage: NIST AI RMF
- Only Lakera covers: EU AI Act
- Shared capabilities: 1 of 16 listed.
Want our editorial take? Email the editors or read our methodology.
At a glance
| Attribute | Lakera | Prisma AIRS |
|---|---|---|
| Founded | 2021 | 2005 |
| Headquarters | Zurich, Switzerland | Santa Clara, United States |
| Employees | 51-200 | Undisclosed |
| Funding | Series A, $20M raised (July 2024), led by Atomico with participation from Citi Ventures, Dropbox Ventures, and redalpine. Prior seed of $10M (2023) led by redalpine. Total raised: $30M. | Product of Palo Alto Networks, Inc. (Nasdaq: PANW); no separate funding |
| Pricing | Enterprise-focused SaaS. No public pricing listed. API-based pricing model expected. Contact sales. | Bring-your-own-license: AI Runtime Security, AI Supply Chain Security and AI Red Teaming are all funded from a pool of Palo Alto Networks Software NGFW credits, activated with an authcode. API Intercept usage is "priced per billion monthly tokens" (one token is four characters; profiles start at 1 billion tokens and go up in whole billions; the quota resets each calendar month) and requires Strata Cloud Manager Essentials or Pro. AWS Marketplace lists a Prisma AIRS API SaaS contract at $4,353.00 per 12 months for its "Prisma AIRS API Calls" dimension; the listing doesn't say how many calls that covers. Credit rates and prices for AI Red Teaming and Agent Security aren't published. |
| Website | Visit site | Visit site |
Framework coverage
| Framework | Lakera | Prisma AIRS |
|---|---|---|
| EU AI Act | Partial | — |
| NIST AI RMF | Partial | limited |
Capabilities
| Capability | Lakera | Prisma AIRS |
|---|---|---|
| AI Discovery | — | ✓ |
| AI Guardrails | — | ✓ |
| AI Supply Chain Risk | — | ✓ |
| Agentic Red Teaming | — | ✓ |
| Data Leakage Prevention | — | ✓ |
| LLM Guardrails & Content Filtering | ✓ | — |
| LLM Red Teaming | ✓ | ✓ |
| Model Monitoring | ✓ | — |
| Policy Management | ✓ | — |
| Prompt Injection Defense | — | ✓ |
| Regulatory Intelligence | ✓ | — |
| Risk Assessment Workflow | ✓ | — |
| Risk Scoring | — | ✓ |
| Runtime Enforcement | — | ✓ |
| Shadow AI Detection | — | ✓ |
| Third-Party AI Vendor Risk | ✓ | — |
Industries served
Lakera
- SaaS & Technology
- Education
- Financial Services
Prisma AIRS
- None listed
Integrations
Lakera
- OpenAI API
- Anthropic API
Prisma AIRS
- Amazon Bedrock
- Google Vertex AI
- Azure OpenAI Service
- OpenAI API
- Portkey
- Kubernetes
- AWS Marketplace
Frequently asked
What is the difference between Lakera and Prisma AIRS?+
Lakera is The leading security platform to secure your AI future; Prisma AIRS is Palo Alto Networks' AI security platform, built with Protect AI: model scanning, AI red teaming, posture management, runtime and agent security. The full side-by-side covers framework coverage (1 shared, 1 unique to Lakera, 0 unique to Prisma AIRS), pricing model, and capability overlap.
How do Lakera and Prisma AIRS pricing compare?+
Lakera: Enterprise-focused SaaS. No public pricing listed. API-based pricing model expected. Contact sales. Prisma AIRS: Bring-your-own-license: AI Runtime Security, AI Supply Chain Security and AI Red Teaming are all funded from a pool of Palo Alto Networks Software NGFW credits, activated with an authcode. API Intercept usage is "priced per billion monthly tokens" (one token is four characters; profiles start at 1 billion tokens and go up in whole billions; the quota resets each calendar month) and requires Strata Cloud Manager Essentials or Pro. AWS Marketplace lists a Prisma AIRS API SaaS
Which AI compliance frameworks do Lakera and Prisma AIRS both support?+
Both vendors document support for NIST AI RMF. Coverage strength varies; see the framework matrix below.
Related
Keep reading
Editorial independence: This comparison is free and was not paid for by either vendor. See our methodology.