Prisma Cloud
Palo Alto Networks CNAPP spanning code security, posture management, and runtime protection.
Technical Architecture & Overview
Prisma Cloud is Palo Alto Networks' cloud-native application protection platform, combining IaC scanning, CSPM, CWPP, CIEM, and API security from build through runtime. Palo Alto Networks introduced Cortex Cloud in February 2025 as the next version of Prisma Cloud, with existing Prisma Cloud customers upgraded to it, so current materials appear under both names.
Targeted Technical Use Cases
Organizations standardizing cloud security on the Palo Alto Networks platform alongside its network products.
Evaluation & Trade-offs
Core Strengths
- +Wide module range across the application lifecycle.
- +Runtime defense from the 2019 Twistlock acquisition.
- +Native integration with the Cortex XSIAM SecOps platform.
Trade-Offs & Limitations
- -Branding transition complicates evaluation.
- -Module breadth can exceed initial needs.
Defensive Security Application
Lifecycle cloud protection from IaC review through workload runtime defense.
Frequently Asked Questions
What is Prisma Cloud?→
Prisma Cloud is Palo Alto Networks' cloud-native application protection platform, combining IaC scanning, CSPM, CWPP, CIEM, and API security from build through runtime. Palo Alto Networks introduced Cortex Cloud in February 2025 as the next version of Prisma Cloud, with existing Prisma Cloud customers upgraded to it, so current materials appear under both names.
What is Prisma Cloud used for?→
Organizations standardizing cloud security on the Palo Alto Networks platform alongside its network products.
What are the strengths of Prisma Cloud?→
- +Wide module range across the application lifecycle.
- +Runtime defense from the 2019 Twistlock acquisition.
- +Native integration with the Cortex XSIAM SecOps platform.
What are the limitations of Prisma Cloud?→
- +Branding transition complicates evaluation.
- +Module breadth can exceed initial needs.
How is Prisma Cloud used defensively?→
Lifecycle cloud protection from IaC review through workload runtime defense.