Prisma AIRS API
Palo Alto Networks · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
Prisma AIRS offers a comprehensive suite of security use cases for AI applications and agents. It defends against Prompt Injection, preventing malicious manipulation of AI behavior by detecting and neutralizing adversarial prompts. To counter external risks, it identifies and blocks Malicious URLs embedded in AI outputs or inputs, safeguarding users from phishing or malware. For data integrity, Sensitive Data Loss detection prevents unauthorized exposure of confidential information, complemented by Mask Sensitive Data capabilities that redact or anonymize sensitive details in real-time, ensuring privacy and compliance.
Security extends to critical infrastructure with Database Security Attack prevention, mitigating risks where AI interacts with databases, preventing SQL injection or other data breaches. The platform also filters Toxic Content, ensuring AI-generated or processed language is safe and appropriate, free from hate speech, harassment, or violence. Furthermore, it combats Malicious Code (e.g., Python, Javascript) that could be injected into AI workflows, preventing execution of harmful scripts.
Show the rest of the publisher’s description (1 more line)
A significant focus is on AI Agent Threats, addressing unique vulnerabilities like cascading hallucinations, tool misuse, and memory manipulation inherent in autonomous AI agents. For enhanced AI reliability, Contextual Grounding ensures AI responses remain within defined factual boundaries, reducing factual errors or "hallucinations." Custom Topic Guardrails allow organizations to enforce specific content policies, preventing the AI from discussing undesirable or prohibited subjects. Lastly, Secure MCP (Model Context Protocol) provides a secure framework for managing and protecting the context and metadata exchanged between AI models and applications, crucial for maintaining AI integrity and preventing data tampering. These capabilities collectively aim to build secure, reliable, and compliant AI systems.
Highlights
Highlighted by the publisher on AWS Marketplace.
Comprehensive Threat Protection: Prisma AIRS addresses a wide range of threats beyond traditional prompt injection, including malicious URLs, sensitive data loss, database security attacks, toxic content, and malicious code. This indicates a holistic approach to AI application security.
AI Agent-Specific Security: The API specifically targets the growing challenge of securing AI agents, providing capabilities to mitigate threats unique to their operation.
Data Control and Compliance: Features like "Mask Sensitive Data" and "Custom Topic Guardrails" highlight its utility in maintaining data privacy, preventing data leakage, and ensuring AI applications adhere to specific content policies.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Plans and pricing as listed
3 listed- Requests
- Requests
- Requests
Refund terms
As stated by the publisher on AWS Marketplace.
We do not currently support refunds, but you can cancel at any time.
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.