Prisma AIRS vs Prompt Security

Prisma AIRS is Palo Alto Networks' platform for securing AI applications, agents, models and data. Palo Alto Networks launched it on April 28, 2025, the same day it announced its intent to acquire Protect AI, a Seattle AI security company, and completed that acquisition on July 22, 2025. Prisma AIRS 2.0, released October 28, 2025, "completes the native integration" of Protect AI, and Protect AI's chief executive, Ian Swanson, joined as VP, Product, Prisma AIRS. The protectai.com site now redirects to the Prisma AIRS page, and the README of Protect AI's open-source LLM Guard library says the project has been archived. Palo Alto Networks was incorporated in 2005 and is based in Santa Clara; this profile lists the company's founding year and headquarters, as the directory does for other big-company products. Palo Alto's fiscal 2026 annual report lists six parts: AI Gateway, Agent Security, AI Red Teaming, AI Runtime Security, AI Model Security (labeled AI Supply Chain Security on the current product page) and AI Posture Management. AI Runtime Security comes in two forms. API Intercept is called from application code through a REST API to scan prompts and model responses. Network Intercept inspects cloud network traffic inline and is managed from Strata Cloud Manager or Panorama. The platform supports AWS, Azure, Google Cloud, Kubernetes, private clouds and on-premises infrastructure. AI Red Teaming tests agentic and non-agentic systems with a library of more than 500 attack vectors across 50+ techniques and produces a risk score. AI Model Security scans models for tampering, malicious code, data poisoning, architectural backdoors and unsafe serialization formats. **Agent security** The product page now adds Agent Identity Security and Agentic Endpoint Security. Palo Alto completed its acquisition of Koi, which adds agentic endpoint security, in April 2026. On May 29, 2026 it completed its acquisition of Portkey, whose gateway becomes the core AI Gateway for Prisma AIRS: it routes, monitors and secures traffic between agents and models. **Frameworks** Palo Alto maps AI Red Teaming attacks to the OWASP Top 10 for LLMs, MITRE ATLAS and what it calls the NIST Risk Management Framework. We found no documented support for the EU AI Act or ISO 42001. **Who it's for** Enterprises, especially existing Palo Alto Networks customers on Strata Cloud Manager, that want model scanning, red teaming and runtime protection funded from the same credit pool as their software firewalls.

Prompt Security is an AI security product that controls how employees use AI tools and protects the AI applications and agents companies build. Itamar Golan (CEO) and Lior Drihem (CTO), who had worked at Check Point and Orca Security, founded it in August 2023; it is based in Tel Aviv. It raised $23 million: a $5 million seed round led by Hetz Ventures (January 2024) and an $18 million Series A led by Jump Capital (November 2024), with Ridge Ventures, Okta and F5 joining. SentinelOne, the Mountain View, California security company, agreed to buy Prompt Security on August 5, 2025 and completed the deal on September 5, 2025. Its Form 8-K puts the consideration at approximately $180 million in cash and SentinelOne Class A stock. Prompt Security is still sold under its own name, as part of SentinelOne's Singularity Platform. The product page is on sentinelone.com; prompt.security now hosts research and free tools such as the open-source Prompt Fuzzer, and the old press release we checked there redirects to SentinelOne. **What it does** SentinelOne's Prompt Security page lists three areas. AI Usage Control inventories the AI tools and code assistants employees and developers use, including unsanctioned shadow AI, and redacts sensitive data and enforces policies across more than 15,000 AI services in real time. It also covers GitHub Copilot, Cursor and Claude Code, keeping secrets and intellectual property out of them. AI Application Security tests homegrown AI apps for prompt injection, jailbreaks and data poisoning before deployment, runs a real-time AI firewall, and turns red-team findings into guardrails. Agentic AI Security finds shadow MCP servers and unsanctioned agents, enforces least-privilege access for agents and keeps a searchable audit log. SentinelOne says Prompt's MCP gateway scores the risk of more than 13,000 known MCP servers and can allow, block, filter or redact their actions. Prompt deploys through a lightweight agent and browser extensions, and covers major LLM providers, including OpenAI, Anthropic and Google, and self-hosted models. **Product changes since the acquisition** At its OneCon conference in November 2025 SentinelOne launched Prompt Security for Employees, for AI Code Assistants and for AI Applications, plus Prompt Security for Agentic AI in beta. At RSAC in March 2026 it announced Prompt AI Agent Security, a discovery and governance control plane for agents and MCP servers (agent posture management was in preview), and Prompt AI Red Teaming for testing homegrown AI apps. **Frameworks** Neither SentinelOne's Prompt Security pages nor prompt.security name the EU AI Act, ISO 42001 or the NIST AI RMF; they refer only to meeting compliance requirements in general terms. This profile lists no frameworks. **Who it's for** Companies that want to let employees use generative AI and coding assistants while controlling data exposure, especially existing SentinelOne customers. Named customers include 10x Banking and Carnival Corporation.