Prisma AIRS vs Robust Intelligence

Prisma AIRS is Palo Alto Networks' platform for securing AI applications, agents, models and data. Palo Alto Networks launched it on April 28, 2025, the same day it announced its intent to acquire Protect AI, a Seattle AI security company, and completed that acquisition on July 22, 2025. Prisma AIRS 2.0, released October 28, 2025, "completes the native integration" of Protect AI, and Protect AI's chief executive, Ian Swanson, joined as VP, Product, Prisma AIRS. The protectai.com site now redirects to the Prisma AIRS page, and the README of Protect AI's open-source LLM Guard library says the project has been archived. Palo Alto Networks was incorporated in 2005 and is based in Santa Clara; this profile lists the company's founding year and headquarters, as the directory does for other big-company products. Palo Alto's fiscal 2026 annual report lists six parts: AI Gateway, Agent Security, AI Red Teaming, AI Runtime Security, AI Model Security (labeled AI Supply Chain Security on the current product page) and AI Posture Management. AI Runtime Security comes in two forms. API Intercept is called from application code through a REST API to scan prompts and model responses. Network Intercept inspects cloud network traffic inline and is managed from Strata Cloud Manager or Panorama. The platform supports AWS, Azure, Google Cloud, Kubernetes, private clouds and on-premises infrastructure. AI Red Teaming tests agentic and non-agentic systems with a library of more than 500 attack vectors across 50+ techniques and produces a risk score. AI Model Security scans models for tampering, malicious code, data poisoning, architectural backdoors and unsafe serialization formats. **Agent security** The product page now adds Agent Identity Security and Agentic Endpoint Security. Palo Alto completed its acquisition of Koi, which adds agentic endpoint security, in April 2026. On May 29, 2026 it completed its acquisition of Portkey, whose gateway becomes the core AI Gateway for Prisma AIRS: it routes, monitors and secures traffic between agents and models. **Frameworks** Palo Alto maps AI Red Teaming attacks to the OWASP Top 10 for LLMs, MITRE ATLAS and what it calls the NIST Risk Management Framework. We found no documented support for the EU AI Act or ISO 42001. **Who it's for** Enterprises, especially existing Palo Alto Networks customers on Strata Cloud Manager, that want model scanning, red teaming and runtime protection funded from the same credit pool as their software firewalls.

Robust Intelligence was an AI security company founded in 2019 by Yaron Singer, a Harvard computer science and applied mathematics professor who became its CEO, and Kojin Oshiba, his former student. It was based in San Francisco and also had operations in Israel. Sequoia Capital led its seed and Series A rounds ($14 million combined, announced in October 2020), and Tiger Global and Sequoia led a $30 million Series B in December 2021, bringing its funding to about $44 million. Cisco Investments was also an investor. Cisco announced its intent to acquire Robust Intelligence on August 26, 2024 and completed the deal on September 24, 2024. The price was not disclosed. Robust Intelligence is no longer a separate product: its technology is the core of Cisco AI Defense, which Cisco unveiled on January 15, 2025 and said would be available that March. Buyers should evaluate Cisco AI Defense. **What it sold** Robust Intelligence started with RIME (the Robust Intelligence Model Engine), built around an "AI Firewall" that wraps a model, checks its inputs and outputs, and stress-tests it. Its later platform had two parts. AI Validation automatically tested models for security and safety vulnerabilities (such as prompt injection and data poisoning) before and after deployment, scanned open-source models, data and files for supply chain vulnerabilities such as malicious pickle files, recommended guardrails and produced reports. AI Protection applied those guardrails in production. It ran as SaaS in Robust Intelligence's private AWS VPC or as a hybrid deployment with a self-hosted data plane, and it integrated with observability and SIEM tools such as Splunk, Datadog, CrowdStrike and AppDynamics. The company also co-developed the AI Risk Database and said it co-authored NIST's adversarial machine learning taxonomy and contributed to the OWASP Top 10 for LLM Applications. **Frameworks** Its product page says tests were mapped to the OWASP Top 10 for LLM Applications, MITRE ATLAS, NIST's adversarial machine learning taxonomy, the EU AI Act and the White House executive order on AI. It does not mention the NIST AI RMF or ISO 42001. Cisco AI Defense maps to the NIST AI RMF, MITRE ATLAS and the OWASP Top 10 for LLMs. **Status** The robustintelligence.com site is still online and describes AI Validation and AI Protection without mentioning Cisco. We found no current way to buy Robust Intelligence separately from Cisco.