Prisma AIRS
Palo Alto Networks, Inc.
Palo Alto Networks' AI security platform, built with Protect AI: model scanning, AI red teaming, posture management, runtime and agent security
Last checked October 15, 2026Quick facts: Prisma AIRS is an AI compliance vendor founded in 2005 and headquartered in Santa Clara, United States. The vendor publicly documents coverage for NIST AI RMF. Pricing is usage-based. Profile last checked October 15, 2026; sources are cited at the bottom of this page.
About Prisma AIRS
Prisma AIRS is Palo Alto Networks' platform for securing AI applications, agents, models and data. Palo Alto Networks launched it on April 28, 2025, the same day it announced its intent to acquire Protect AI, a Seattle AI security company, and completed that acquisition on July 22, 2025. Prisma AIRS 2.0, released October 28, 2025, "completes the native integration" of Protect AI, and Protect AI's chief executive, Ian Swanson, joined as VP, Product, Prisma AIRS. The protectai.com site now redirects to the Prisma AIRS page, and the README of Protect AI's open-source LLM Guard library says the project has been archived. Palo Alto Networks was incorporated in 2005 and is based in Santa Clara; this profile lists the company's founding year and headquarters, as the directory does for other big-company products. Palo Alto's fiscal 2026 annual report lists six parts: AI Gateway, Agent Security, AI Red Teaming, AI Runtime Security, AI Model Security (labeled AI Supply Chain Security on the current product page) and AI Posture Management. AI Runtime Security comes in two forms. API Intercept is called from application code through a REST API to scan prompts and model responses. Network Intercept inspects cloud network traffic inline and is managed from Strata Cloud Manager or Panorama. The platform supports AWS, Azure, Google Cloud, Kubernetes, private clouds and on-premises infrastructure. AI Red Teaming tests agentic and non-agentic systems with a library of more than 500 attack vectors across 50+ techniques and produces a risk score. AI Model Security scans models for tampering, malicious code, data poisoning, architectural backdoors and unsafe serialization formats. **Agent security** The product page now adds Agent Identity Security and Agentic Endpoint Security. Palo Alto completed its acquisition of Koi, which adds agentic endpoint security, in April 2026. On May 29, 2026 it completed its acquisition of Portkey, whose gateway becomes the core AI Gateway for Prisma AIRS: it routes, monitors and secures traffic between agents and models. **Frameworks** Palo Alto maps AI Red Teaming attacks to the OWASP Top 10 for LLMs, MITRE ATLAS and what it calls the NIST Risk Management Framework. We found no documented support for the EU AI Act or ISO 42001. **Who it's for** Enterprises, especially existing Palo Alto Networks customers on Strata Cloud Manager, that want model scanning, red teaming and runtime protection funded from the same credit pool as their software firewalls.
Frameworks supported
Regulations, voluntary standards and compliance programs Prisma AIRS documents support for on their own materials. Chip shading reflects the strength of the claim, not an independent audit.
Voluntary standard · US · voluntary
Prisma AIRS features
Capabilities Prisma AIRS markets publicly. Inclusion means the feature is documented on the vendor's site — not that it's best-in-class. Last checked October 15, 2026.
AI Discovery
Inventory of AI assets, models, prompts, and datasets across an enterprise environment.
Shadow AI Detection
Discovery of unsanctioned AI tools and model usage across an organization.
LLM Red Teaming
Automated adversarial testing of LLMs for jailbreaks, prompt injection, and unsafe outputs.
Agentic Red Teaming
Automated adversarial testing using AI agents to probe model and application weaknesses.
AI Supply Chain Risk
Assessment of risks from third-party models, datasets, and AI service providers.
AI Guardrails
Runtime controls that constrain LLM input and output to enforce safety, compliance, and brand policies.
Prompt Injection Defense
Detection and mitigation of malicious prompts intended to bypass system instructions or exfiltrate data.
Data Leakage Prevention
Inspection of LLM outputs to block PII, secrets, and regulated data from leaving the boundary.
Runtime Enforcement
Inline policy enforcement on AI inputs and outputs at request time.
Risk Scoring
Quantitative risk assessment for AI use cases, vendors, or model deployments.
Integrations
Documented by Prisma AIRS in public product materials.
- Amazon Bedrock
- Google Vertex AI
- Azure OpenAI Service
- OpenAI API
- Portkey
- Kubernetes
- AWS Marketplace
Prisma AIRS pricing
Bring-your-own-license: AI Runtime Security, AI Supply Chain Security and AI Red Teaming are all funded from a pool of Palo Alto Networks Software NGFW credits, activated with an authcode. API Intercept usage is "priced per billion monthly tokens" (one token is four characters; profiles start at 1 billion tokens and go up in whole billions; the quota resets each calendar month) and requires Strata Cloud Manager Essentials or Pro. AWS Marketplace lists a Prisma AIRS API SaaS contract at $4,353.00 per 12 months for its "Prisma AIRS API Calls" dimension; the listing doesn't say how many calls that covers. Credit rates and prices for AI Red Teaming and Agent Security aren't published.
Pros and cons of Prisma AIRS
Pros
- Wide scope in one platform: posture management, model (supply chain) scanning, AI red teaming, runtime protection through an API or inline on the network, agent security and an AI gateway.
- Red teaming at scale: more than 500 attack vectors across 50+ techniques, mapped to the OWASP Top 10 for LLMs, MITRE ATLAS and NIST, with setup under 10 minutes and reports typically within 5 hours.
- Runtime inspection documents Amazon Bedrock, Google Vertex AI and Gemini, Azure OpenAI and OpenAI APIs, plus any custom endpoint that uses the OpenAI format.
- More pricing detail than most enterprise AI security tools: token-based units are defined in the docs, and AWS Marketplace shows a 12-month contract price.
- Uses licensing and management Palo Alto customers already have: Software NGFW credits and Strata Cloud Manager or Panorama.
Cons
- Licensing is complex (credit pools, deployment profiles, authcodes and monthly token quotas), and credit consumption rates aren't published.
- The product is assembled from several acquisitions (Protect AI, Koi, Portkey) and modules have been renamed, such as AI Model Security to AI Supply Chain Security, so confirm which modules are generally available and what each costs.
- Protect AI no longer has its own product line: protectai.com redirects to Prisma AIRS and the open-source LLM Guard library is archived, so teams that relied on it need to migrate.
- No documented EU AI Act or ISO 42001 support; the framework mapping we found covers only red-teaming attack categories.
- Token-based API licensing requires Strata Cloud Manager Essentials or Pro, which suits existing Palo Alto Networks customers more than newcomers.
Alternatives to Prisma AIRS
Frequently asked
What is Prisma AIRS?+
Prisma AIRS is Palo Alto Networks' AI security platform, launched in April 2025. It covers AI posture management, model scanning, AI red teaming, runtime protection for AI apps and agents, agent security and an AI gateway.
What happened to Protect AI?+
Palo Alto Networks announced its intent to acquire Protect AI on April 28, 2025 and completed the deal on July 22, 2025. Prisma AIRS 2.0 (October 28, 2025) completed the integration of Protect AI's technology. The protectai.com site now redirects to the Prisma AIRS page, and Protect AI's open-source LLM Guard repository says the project has been archived.
How is Prisma AIRS priced?+
Prisma AIRS uses bring-your-own licensing funded by Palo Alto Networks Software NGFW credits. API-based runtime protection is priced per billion monthly tokens, with a 1 billion minimum. AWS Marketplace lists a Prisma AIRS API contract at $4,353.00 per 12 months. Palo Alto doesn't publish credit consumption rates.
Does Prisma AIRS secure AI agents?+
Yes. Agent Security discovers and inventories AI agents, including unsanctioned ones, and defends in real time against prompt injection, tool misuse, memory manipulation and malicious agent behavior. The product page also lists Agent Identity Security and Agentic Endpoint Security, and the Portkey-based AI Gateway routes and secures agent traffic to models.
Which frameworks does Prisma AIRS map to?+
Palo Alto maps AI Red Teaming attacks to the OWASP Top 10 for LLMs, MITRE ATLAS and the NIST Risk Management Framework. We found no documented support for the EU AI Act or ISO 42001.
What are the alternatives to Prisma AIRS?+
The closest alternatives in this directory are Cisco AI Defense and F5 AI Guardrails, which also came from acquisitions of AI security startups, and the AI security platforms HiddenLayer, Noma Security, Lakera and Prompt Security.
Sources
- Palo Alto Networks: Prisma AIRS product page (modules, API and Network Intercept)
- Palo Alto Networks docs: Prisma AIRS licenses (BYOL, Software NGFW credits)
- Palo Alto Networks docs: Token-based licensing for AIRS Runtime API
- Palo Alto Networks docs: Prisma AIRS overview (components, supported platforms)
- Palo Alto Networks docs: AI Red Teaming (attack library, OWASP, NIST, MITRE ATLAS mapping)
- Palo Alto Networks docs: Supported AI models and public clouds (Bedrock, Vertex AI, Azure OpenAI)
- Palo Alto Networks: Intent to acquire Protect AI and launch of Prisma AIRS (April 28, 2025)
- Palo Alto Networks: Completes acquisition of Protect AI (July 22, 2025)
- Palo Alto Networks: Launch of Prisma AIRS 2.0 (October 28, 2025)
- Palo Alto Networks: Completes acquisition of Portkey (May 29, 2026)
- Palo Alto Networks Form 10-K, fiscal 2026 (incorporated 2005; Santa Clara; Prisma AIRS components; Koi acquisition)
- AWS Marketplace: Prisma AIRS API ($4,353.00 per 12 months)
- LLM Guard README (protectai/llm-guard, via jsDelivr): "This project has been archived"
- SiliconANGLE: Palo Alto Networks buys Protect AI, debuts Prisma AIRS (April 28, 2025)
Keep reading
See an error or outdated detail?
Profiles carry a last-checked date. If something is out of date or wrong, send a correction and we will review it.
Work at Prisma AIRS?
Claim this listing to propose edits to the tagline, description, pricing notes, and headquarters details. Every change is still reviewed by our editorial team.