Palo Alto Prisma Cloud

The platform offers an integrated approach that enables security operations and DevOps teams to collaborate effectively and accelerate secure cloud-native application development.

Prisma Cloud protects and integrates with cloud-native architectures and toolkits to ensure complete security coverage while breaking security operational silos across the entire application lifecycle. Fundamentally, it enables DevSecOps adoption and enhanced responsiveness to the changing security needs of cloud-native architectures.

Prisma Cloud Pillars

Code Security

Embed security into developer tools to ship secure code for pipelines, infrastructure, and applications. Developers and DevOps teams use containers, open source software, and infrastructure as code (IaC) to quickly build, provision, and update cloud applications and infrastructure. Prisma Cloud provides visibility, control, and automated fixes for vulnerabilities and misconfigurations embedded in developer tools across the full application lifecycle. The platform offers full-stack security from code to cloud, covering:

• IaC security
• Secrets security
• Container image scanning
• Software composition analysis (SCA)
• Supply chain security
• Software bill of materials (SBOM) generation

Cloud Security Posture Management (CSPM)

Effective cloud security requires complete visibility into every deployed resource, along with absolute confidence in their configuration and compliance status. Prisma Cloud takes a unique approach to CSPM, going beyond mere compliance or configuration management. Vulnerability intelligence from more than 30 sources provides immediate risk clarity while controls across the development pipeline prevent insecure configurations from ever reaching production in the first place. Prisma Cloud provides:

• Visibility, Compliance, and Governance:
  • Cloud asset inventory
  • Configuration assessment (runtime)
  • Compliance monitoring and reporting
• Threat Detection:
  • User and entity behavior analytics (UEBA)
  • API-based network traffic visibility, analytics, and anomaly detection
  • Automated investigation and response
• Data Security (AWS support only):
  • Data classification
  • Malware scanning
  • Data governance

Cloud Workload Protection

The cloud-native landscape is constantly evolving. New platforms and technologies allow organizations to deploy more rapidly and at a greater scale than ever. Prisma Cloud delivers full lifecycle protection across public and private clouds as well as on-premises environments. You can easily integrate security into the leading continuous integration/continuous delivery (CI/CD) workflows, registries, and running stacks. Security modules include:

• Host Security:
  • Vulnerability management
  • Runtime security
  • Compliance management
  • Access control
• Container Security:
  • Vulnerability management
  • Runtime security
  • Compliance management
  • Access control
  • Git repository scanning
• Serverless Security:
  • Vulnerability management
  • Runtime security
  • Compliance management
  • Access control
• Web Application and API Security:
  • OWASP Top 10 protection
  • API protection

Cloud Network Security

Network protection must be adapted for cloud-native environments while still
enforcing consistent policies across hybrid environments. Prisma Cloud detects
and prevents network anomalies by enforcing container-level microsegmentation,
inspecting traffic flow logs, and leveraging advanced cloud-native Layer 7 threat
prevention with:

• Network visibility and anomaly detection
• Identity-based microsegmentation
• Cloud-native firewalling

Cloud Identity Security

Traditional manual methods for determining least-privileged access make it difficult for security teams to keep up with the growing number of entitlements across cloud services. Prisma Cloud continuously detects and automatically remediates identity and access risks across infrastructure as a service (IaaS) and platform as a service (PaaS) offerings. It discovers all human and machine identities across cloud environments and then analyzes entitlements, roles, and policies. Prisma Cloud provides:

• Permissions visibility
• IAM governance
• Automated response
• UEBA

For more information, visit paloaltonetworks.com/prisma/cloud.