[](https://www.paloaltonetworks.com/?ts=markdown) * Sign In * Customer * Partner * Employee * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown) * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * EN * [USA (ENGLISH)](https://www.paloaltonetworks.com) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca) * [CHINA (简体中文)](https://www.paloaltonetworks.cn) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it) * [JAPAN (日本語)](https://www.paloaltonetworks.jp) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk) * ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) * [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Palo Alto Networks logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)](https://www.paloaltonetworks.com/?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * [](https://www.paloaltonetworks.com/?ts=markdown) * Products ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Products [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [AI Security](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise Device Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical Device Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) * [OT Device Security](https://www.paloaltonetworks.com/network-security/ot-device-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Agent](https://www.paloaltonetworks.com/sase/prisma-agent?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex AgentiX](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Cortex Advanced Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Cortex Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Unit 42 Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * Solutions ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions Secure AI by Design * [Secure AI Ecosystem](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [Secure GenAI Usage](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) Network Security * [Cloud Network Security](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Data Center Security](https://www.paloaltonetworks.com/network-security/data-center?ts=markdown) * [DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Intrusion Detection and Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Device Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Secure All Apps, Users and Locations](https://www.paloaltonetworks.com/sase/secure-users-data-apps-devices?ts=markdown) * [Secure Branch Transformation](https://www.paloaltonetworks.com/sase/secure-branch-transformation?ts=markdown) * [Secure Work on Any Device](https://www.paloaltonetworks.com/sase/secure-work-on-any-device?ts=markdown) * [VPN Replacement](https://www.paloaltonetworks.com/sase/vpn-replacement-for-secure-remote-access?ts=markdown) * [Web \& Phishing Security](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) Cloud Security * [Application Security Posture Management (ASPM)](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Code Security](https://www.paloaltonetworks.com/cortex/cloud/code-security?ts=markdown) * [Cloud Security Posture Management (CSPM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management (CIEM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management (DSPM)](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management (AI-SPM)](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Cloud Detection and Response (CDR)](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Cloud Workload Protection (CWP)](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [Web Application \& API Security (WAAS)](https://www.paloaltonetworks.com/cortex/cloud/web-app-api-security?ts=markdown) Security Operations * [Cloud Detection and Response (CDR)](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Security Information and Event Management](https://www.paloaltonetworks.com/cortex/modernize-siem?ts=markdown) * [Network Security Automation](https://www.paloaltonetworks.com/cortex/network-security-automation?ts=markdown) * [Incident Case Management](https://www.paloaltonetworks.com/cortex/incident-case-management?ts=markdown) * [SOC Automation](https://www.paloaltonetworks.com/cortex/security-operations-automation?ts=markdown) * [Threat Intel Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/attack-surface-management?ts=markdown) * [Compliance Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/compliance-management?ts=markdown) * [Internet Operations Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse/internet-operations-management?ts=markdown) * [Extended Data Lake (XDL)](https://www.paloaltonetworks.com/cortex/cortex-xdl?ts=markdown) * [Agentic Assistant](https://www.paloaltonetworks.com/cortex/cortex-agentic-assistant?ts=markdown) Endpoint Security * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/detection-and-response?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) Identity Security * [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) [Industries](https://www.paloaltonetworks.com/industry?ts=markdown) * [Public Sector](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown) * [Financial Services](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown) * [Manufacturing](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown) * [Healthcare](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown) * [Small \& Medium Business Solutions](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown) * [Transportation](https://www.paloaltonetworks.com/industry/transportation-security?ts=markdown) * Services ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Services [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Assess](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Frontier AI Defense](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * [AI Security Assessment](https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/assess/attack-surface-assessment?ts=markdown) * [Breach Readiness Review](https://www.paloaltonetworks.com/unit42/assess/breach-readiness-review?ts=markdown) * [BEC Readiness Assessment](https://www.paloaltonetworks.com/bec-readiness-assessment?ts=markdown) * [Cloud Security Assessment](https://www.paloaltonetworks.com/unit42/assess/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/assess/compromise-assessment?ts=markdown) * [Cyber Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/cyber-risk-assessment?ts=markdown) * [M\&A Cyber Due Diligence](https://www.paloaltonetworks.com/unit42/assess/mergers-acquisitions-cyber-due-diligence?ts=markdown) * [Penetration Testing](https://www.paloaltonetworks.com/unit42/assess/penetration-testing?ts=markdown) * [Purple Team Exercises](https://www.paloaltonetworks.com/unit42/assess/purple-teaming?ts=markdown) * [Ransomware Readiness Assessment](https://www.paloaltonetworks.com/unit42/assess/ransomware-readiness-assessment?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/assess/soc-assessment?ts=markdown) * [Supply Chain Risk Assessment](https://www.paloaltonetworks.com/unit42/assess/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/assess/tabletop-exercise?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * [Respond](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Cloud Incident Response](https://www.paloaltonetworks.com/unit42/respond/cloud-incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Managed Detection and Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/unit42/respond/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * [Transform](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [IR Plan Development and Review](https://www.paloaltonetworks.com/unit42/transform/incident-response-plan-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/transform/security-program-design?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/transform/vciso?ts=markdown) * [Zero Trust Advisory](https://www.paloaltonetworks.com/unit42/transform/zero-trust-advisory?ts=markdown) [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-unit-42.svg) UNIT 42 RETAINER Custom-built to fit your organization's needs, you can choose to allocate your retainer hours to any of our offerings, including proactive cyber risk management services. Learn how you can put the world-class Unit 42 Incident Response team on speed dial. Learn more](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) * Partners ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Partners NextWave Partners * [NextWave Partner Community](https://www.paloaltonetworks.com/partners?ts=markdown) * [Cloud Service Providers](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown) * [Global System Integrators](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown) * [Technology Partners](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown) * [Service Providers](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown) * [Resellers](https://www.paloaltonetworks.com/partners/resellers?ts=markdown) * [Managed Security Service Providers](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown) Take Action * [Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Managed Services Program](https://www.paloaltonetworks.com/partners/managed-security-services-provider-program?ts=markdown) * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner) * [Request Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess) * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator) [CYBERFORCE CYBERFORCE represents the top 1% of partner engineers trusted for their security expertise. Learn more](https://www.paloaltonetworks.com/cyberforce?ts=markdown) * Company ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Company Palo Alto Networks * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com) * [Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Military \& Veterans](https://jobs.paloaltonetworks.com/military) [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown) * [Precision AI Security](https://www.paloaltonetworks.com/precision-ai-security?ts=markdown) * [Our Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown) * [Accelerate Your Cybersecurity Transformation](https://www.paloaltonetworks.com/why-paloaltonetworks/nam-cxo-portfolio?ts=markdown) * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown) * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown) Careers * [Overview](https://jobs.paloaltonetworks.com/) * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/) [A Newsweek Most Loved Workplace "Businesses that do right by their employees" Read more](https://www.paloaltonetworks.com/company/press/2021/palo-alto-networks-secures-top-ranking-on-newsweek-s-most-loved-workplaces-list-for-2021?ts=markdown) * More ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) More Resources * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Tech Insider](https://techinsider.paloaltonetworks.com/) * [Knowledge Base](https://knowledgebase.paloaltonetworks.com/) * [Palo Alto Networks TV](https://tv.paloaltonetworks.com/) * [Perspectives of Leaders](https://www.paloaltonetworks.com/perspectives/?ts=markdown) * [Cyber Perspectives Magazine](https://www.paloaltonetworks.com/cybersecurity-perspectives/cyber-perspectives-magazine?ts=markdown) * [Regional Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Security Posture Assessment](https://www.paloaltonetworks.com/security-posture-assessment?ts=markdown) * [Threat Vector Podcast](https://unit42.paloaltonetworks.com/unit-42-threat-vector-podcast/) * [Packet Pushers Podcasts](https://www.paloaltonetworks.com/podcasts/packet-pusher?ts=markdown) Connect * [LIVE community](https://live.paloaltonetworks.com/) * [Events](https://events.paloaltonetworks.com/) * [Executive Briefing Center](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown) * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown) * [Contact us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) [Blog Stay up-to-date on industry trends and the latest innovations from the world's largest cybersecurity Learn more](https://www.paloaltonetworks.com/blog/) * Sign In ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Sign In * Customer * Partner * Employee * [Login to download](https://www.paloaltonetworks.com/login?ts=markdown) * [Join us to become a member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * EN ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Language * [USA (ENGLISH)](https://www.paloaltonetworks.com) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca) * [CHINA (简体中文)](https://www.paloaltonetworks.cn) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it) * [JAPAN (日本語)](https://www.paloaltonetworks.jp) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) * [Under Attack?](https://start.paloaltonetworks.com/contact-unit42.html) * [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search) Close search modal [Introducing Idira, the next-generation identity security platform.](https://www.paloaltonetworks.com/idira?ts=markdown) [Discover how prevention starts before the attack at InterSECt 2026.](https://www.paloaltonetworks.com/intersect?ts=markdown) [Prisma AIRS AI Gateway is now generally available](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) [](https://www.paloaltonetworks.com/?ts=markdown) 1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) 2. [AI Security](https://www.paloaltonetworks.com/cyberpedia/ai-security?ts=markdown) 3. [Generative AI Security](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security?ts=markdown) 4. [The hidden challenge of MCP adoption in enterprises](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges?ts=markdown) Table of Contents * [What Is Generative AI Security? \[Explanation/Starter Guide\]](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security?ts=markdown) * [Why is GenAI security important?](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security#why-is-genai-security-important?ts=markdown) * [How does GenAI security work?](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security#how-does-genai-security-work?ts=markdown) * [What are the different types of GenAI security?](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security#different-types-of-genai?ts=markdown) * [What are the main GenAI security risks and threats?](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security#gen-ai-risks?ts=markdown) * [How to secure GenAI in 5 steps](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security#gen-ai-5-steps?ts=markdown) * [Top 12 GenAI security best practices](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security#gen-ai-best-practices?ts=markdown) * [GenAI security FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai-security#gen-ai-security-faqs?ts=markdown) * [OpenAI Codex Best Practices for Enterprise Teams](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices?ts=markdown) * [How Teams Access OpenAI Codex Today](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices#how?ts=markdown) * [Where OpenAI Codex Breaks Down at Scale](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices#where?ts=markdown) * [The Six Operational Controls for Enterprise Codex](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices#six?ts=markdown) * [Securing OpenAI Codex at Runtime](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices#securing?ts=markdown) * [How to Implement These Controls](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices#controls?ts=markdown) * [FAQs](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices#faqs?ts=markdown) * MCP Adoption Challenges: Enterprise Risks and Barriers * [Why MCP Server Sprawl Is a Structural Problem](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#why?ts=markdown) * [Security Risks of Unmanaged MCP Servers](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#security?ts=markdown) * [How Enterprises Can Govern MCP Adoption](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#how?ts=markdown) * [Adopting MCP Securely at Enterprise Scale](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#adopting?ts=markdown) * [MCP Adoption FAQs](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#faqs?ts=markdown) * [What Is AgentOps?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentops?ts=markdown) * [Why Organizations Need AgentOps](https://www.paloaltonetworks.com/cyberpedia/what-is-agentops#why?ts=markdown) * [What Does the AgentOps Stack Include?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentops#what?ts=markdown) * [Operating Agents Without Blind Spots](https://www.paloaltonetworks.com/cyberpedia/what-is-agentops#operating?ts=markdown) * [Bringing the AgentOps Stack Together](https://www.paloaltonetworks.com/cyberpedia/what-is-agentops#bringing?ts=markdown) * [AgentOps FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-agentops#faqs?ts=markdown) * [What Is AI Tool Sprawl? Causes, Risks, and Solutions](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-tool-sprawl?ts=markdown) * [Why AI Tool Sprawl Happens](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-tool-sprawl#why?ts=markdown) * [Risks of AI Tool Sprawl](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-tool-sprawl#sprawl?ts=markdown) * [How to Reduce AI Tool Sprawl](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-tool-sprawl#how?ts=markdown) * [Steps for Addressing Tool Sprawl](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-tool-sprawl#address?ts=markdown) * [AI Tool Sprawl FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-tool-sprawl#faqs?ts=markdown) * [What Is an AI Gateway?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway?ts=markdown) * [Why AI Gateways are Important for Enterprise Security](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#why?ts=markdown) * [How an AI Gateway Works](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#how?ts=markdown) * [How Does The AI Gateway Help?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#help?ts=markdown) * [AI Gateway vs. API Gateway](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#vs?ts=markdown) * [AI Gateway vs. LLM Gateway](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#ai?ts=markdown) * [AI Gateway vs. MCP Gateway](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#mcp?ts=markdown) * [AI Gateway to Enable Enterprise AI](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#enable?ts=markdown) * [AI Gateway FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-gateway#faqs?ts=markdown) * [What Is an AI-BOM (AI Bill of Materials)? \& How to Build It](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom?ts=markdown) * [Why are AI-BOMs necessary?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#why-are-ai-boms-necessary?ts=markdown) * [What information does an AI-BOM contain?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#what-information-does-an-ai-bom-contain?ts=markdown) * [How do you build an AI-BOM?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#how-do-you-build-an-ai-bom?ts=markdown) * [Where does an AI-BOM fit in the AI lifecycle?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#where-does-an-ai-bom-fit-in-the-ai-lifecycle?ts=markdown) * [Who maintains an AI-BOM inside an organization?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#who-maintains-an-ai-bom-inside-an-organization?ts=markdown) * [What challenges come with implementing AI-BOMs?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#what-challenges-come-with-implementing-ai-boms?ts=markdown) * [What standards define AI-BOMs today?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#what-standards-define-ai-boms-today?ts=markdown) * [What is the difference between an SBOM and an AI-BOM?](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#what-is-the-difference-between-an-sbom-and-an-ai-bom?ts=markdown) * [AI-BOM FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-an-ai-bom#ai-bom-faqs?ts=markdown) * [Top GenAI Security Challenges: Risks, Issues, \& Solutions](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks?ts=markdown) * [Why is GenAI security important?](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#why-is-genai-security-important?ts=markdown) * [Prompt injection attacks](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#prompt-injection-attacks?ts=markdown) * [AI system and infrastructure security](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#ai-system-and-infrastrcure-security?ts=markdown) * [Insecure AI generated code](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#insecure-ai-generated-code?ts=markdown) * [Data poisoning](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#data-poisoning?ts=markdown) * [AI supply chain vulnerabilities](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#ai-supply-chain-vulnerabilities?ts=markdown) * [AI-generated content integrity risks](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#ai-generated-content-integrity-risks?ts=markdown) * [Shadow AI](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#shadow-ai?ts=markdown) * [Sensitive data disclosure or leakage](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#sensitive-data-disclosure-or-leakage?ts=markdown) * [Access and authentication exploits](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#access-and-authentication-exploits?ts=markdown) * [Model drift and performance degradation](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#model-drift-and-performance-degradtaion?ts=markdown) * [Governance and compliance issues](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#governance-and-compliance-issues?ts=markdown) * [Algorithmic transparency and explainability](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#algorithmic-transparency-and-explainability?ts=markdown) * [GenAI security risks, threats, and challenges FAQs](https://www.paloaltonetworks.com/cyberpedia/generative-ai-security-risks#genai-security-risks-threats-and-challenges-faqs?ts=markdown) * [What Is AI Prompt Security? Secure Prompt Engineering Guide](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security?ts=markdown) * [What is prompt engineering?](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security#what-is-prompt-engineering?ts=markdown) * [Why does prompt security matter when it comes to AI-driven systems?](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security#why-does-prompt-security-matter-when-it-comes-to-ai-driven-systems?ts=markdown) * [What are the most common prompt engineering security threats?](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security#what-are-the-most-common-prompt-engineering-security-threats?ts=markdown) * [How to design secure prompts](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security#how-to-design-secure-prompts?ts=markdown) * [How to implement prompt security in production](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security#how-to-implement-prompt-security-in-production?ts=markdown) * [How AI prompt security relates to broader GenAI security](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security#how-ai-prompt-security-relates-to-broader-genai-security?ts=markdown) * [AI prompt security FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-prompt-security#ai-prompt-security-faqs?ts=markdown) * [What Is a Prompt Injection Attack? \[Examples \& Prevention\]](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack?ts=markdown) * [How does a prompt injection attack work?](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#cyberpedia-van-dalen-anchor?ts=markdown) * [What are the different types of prompt injection attacks?](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#what-are-the-different-tyipes-of-prompt-injection-attacks?ts=markdown) * [Examples of prompt injection attacks](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#examples-of-prompt-injection-attacks?ts=markdown) * [What is the difference between prompt injections and jailbreaking?](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#what-is-the-difference-between-prompt-injections-and-jailbreaking?ts=markdown) * [What are the potential consequences of prompt injection attacks?](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#what-are-the-potential-consquences-of-prompt-injection-attacks?ts=markdown) * [How to prevent prompt injection: best practices, tips, and tricks](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#how-to-prevent-prompt-injection?ts=markdown) * [A brief history of prompt injection](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#a-brief-history-of-prompt-injection?ts=markdown) * [Prompt injection attack FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-a-prompt-injection-attack#prompt-injection-attack-faqs?ts=markdown) * [What Is Frontier AI?](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai?ts=markdown) * [Frontier AI Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai#explained?ts=markdown) * [How Do Frontier Models Work?](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai#how?ts=markdown) * [What Frontier AI Does Well](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai#what?ts=markdown) * [Applications and Use Cases of Frontier Models](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai#models?ts=markdown) * [What Are the Benefits of Frontier Models?](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai#benefits?ts=markdown) * [Challenges with Frontier AI](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai#challenges?ts=markdown) * [Frontier AI FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai#faqs?ts=markdown) * [Frontier AI Security Checklist](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist?ts=markdown) * [Inventory](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#inventory?ts=markdown) * [Data](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#data?ts=markdown) * [Identity](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#identity?ts=markdown) * [Actions](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#actions?ts=markdown) * [Monitoring](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#monitoring?ts=markdown) * [Evaluation](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#evaluation?ts=markdown) * [Governance](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#governance?ts=markdown) * [Frontier AI Security Checklist FAQs](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-checklist#faqs?ts=markdown) * [Frontier Security Implementation Roadmap](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-implementation-roadmap?ts=markdown) * [Do You Need a Frontier AI Security Implementation Roadmap?](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-implementation-roadmap#roadmap?ts=markdown) * [First 30 Days: Establish Visibility and Stop Uncontrolled Action](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-implementation-roadmap#action?ts=markdown) * [Days 31 to 90: Convert Discovery Into Controls](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-implementation-roadmap#controls?ts=markdown) * [Months 4 to 12: Mature AI Security into an Operating Capability](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-implementation-roadmap#capability?ts=markdown) * [Frontier AI Security Implementation Roadmap FAQs](https://www.paloaltonetworks.com/cyberpedia/frontier-ai-security-implementation-roadmap#faqs?ts=markdown) * [What Is Frontier AI Security?](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security?ts=markdown) * [Why Frontier AI Security Now](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#why?ts=markdown) * [How Frontier Models Work](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#how?ts=markdown) * [Why Architecture Matters for Security](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#security?ts=markdown) * [Frontier AI Threat Model](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#frontier?ts=markdown) * [Core Security Challenges](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#core?ts=markdown) * [Frontier AI Security Controls](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#controls?ts=markdown) * [Evaluation, Red Teaming, and Assurance](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#evaluation?ts=markdown) * [Governance and Operating Model](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#governance?ts=markdown) * [Third-Party AI Risk](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#risk?ts=markdown) * [Metrics for Frontier AI Security](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#metrics?ts=markdown) * [Frontier AI Security FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai-security#faqs?ts=markdown) # MCP Adoption Challenges for Enterprises 5 min. read [Explore PRISMA AIRS AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) [Get a Demo](https://www.paloaltonetworks.com/ai-security/ai-gateway#contact?ts=markdown) Table of Contents * * [Why MCP Server Sprawl Is a Structural Problem](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#why?ts=markdown) * [Security Risks of Unmanaged MCP Servers](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#security?ts=markdown) * [How Enterprises Can Govern MCP Adoption](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#how?ts=markdown) * [Adopting MCP Securely at Enterprise Scale](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#adopting?ts=markdown) * [MCP Adoption FAQs](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#faqs?ts=markdown) 1. Why MCP Server Sprawl Is a Structural Problem * * [Why MCP Server Sprawl Is a Structural Problem](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#why?ts=markdown) * [Security Risks of Unmanaged MCP Servers](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#security?ts=markdown) * [How Enterprises Can Govern MCP Adoption](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#how?ts=markdown) * [Adopting MCP Securely at Enterprise Scale](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#adopting?ts=markdown) * [MCP Adoption FAQs](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges#faqs?ts=markdown) [Model Context Protocol](https://www.paloaltonetworks.com/cyberpedia/what-is-model-context-protocol-mcp?ts=markdown) (MCP) is quickly becoming the connective standard of the agentic AI layer. Adoption is accelerating fast: over [10,000 active public MCP servers](https://agentmarketcap.ai/blog/2026/04/23/mcp-17-month-anniversary-10k-servers-97m-downloads-category-standard) are already live, and [30%](https://www.forrester.com/blogs/predictions-2026-ai-agents-changing-business-models-and-workplace-culture-impact-enterprise-software/) of software vendors are expected to publish their own MCP servers. But the same properties that make MCP powerful (frictionless integration, developer autonomy, and protocol-level interoperability) are also what make it difficult to govern. Organizations are deploying MCP at the pace of developer experimentation while security, compliance, and platform teams struggle to keep up. The result is a widening gap between adoption velocity and enterprise readiness. What MCP Enables * **Cross-System Agent Workflows**: Agents connect to databases, APIs, SaaS tools, and internal services via a single protocol, replacing dozens of custom integrations with a single standardized interface. * **Developer Velocity**: Any team can expose internal functionality as an MCP server in minutes, accelerating AI application development without waiting on platform teams. * **Agentic Autonomy**: Agents execute multi-step actions across enterprise systems without human intervention at each step, enabling workflows that were previously too complex to automate. * **Ecosystem Depth**: Official support from Microsoft Copilot, Visual Studio Code, and a growing list of SaaS vendors means the ecosystem is compounding rather than plateauing. Each of these strengths compounds the governance challenge. The faster teams adopt, the harder it becomes to maintain visibility, enforce policy, and manage risk. ## Why MCP Server Sprawl Is a Structural Problem MCP server sprawl is the natural outcome of a protocol designed to make integration frictionless, applied inside organizations where governance hasn't yet caught up with adoption velocity. Spinning up an MCP server takes minutes, but reviewing, registering, and securing one takes far longer, if it happens at all. ### The Design Gap The MCP specification was built for interoperability, not enterprise security. Servers accept tool-call instructions from any compliant MCP client by default. The implicit trust model assumes servers are benign, and the tools they expose are treated as outputs of well-behaved systems, not as an attack surface. This creates a fundamental mismatch: organizations are deploying MCP at the pace of developer experimentation, but the protocol itself provides none of the controls enterprise environments require. ### The Shadow Catalog Problem When governance is absent, a shadow catalog fills the gap. Teams share server URLs in Slack threads, GitHub repos, and internal wikis. Employees pick up whichever server appears most useful without knowing whether it is maintained, secure, or approved. Every untracked server is a blind spot where [shadow AI](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai?ts=markdown) risk compounds: data exfiltration, unauthorized tool invocations, overprivileged access, and privilege escalation can all occur without detection. ## Security Risks of Unmanaged MCP Servers Unmanaged MCP servers introduce risk across four dimensions that grow with the scale of adoption. | Risk Category | Description | Enterprise Impact | | Credential Exposure | API keys and tokens are hardcoded in server configs with no rotation or revocation path | Lateral movement and unauthorized access if a server is compromised | | Unauthorized Tool Invocation | Agents invoke tools without policy validation; 1 in 4 servers can delete data or execute commands | Data destruction, unauthorized system changes, and compliance violations | | Supply Chain Risk | Third-party MCP servers from public registries can be poisoned or modified post-installation | Malicious tool calls, credential theft, data exfiltration via legitimate channels | | Data Leakage via Context Passing | Agents pass sensitive context from one system to another through chained tool calls | Cross-tenant data exposure, regulatory violations, unintended disclosure of proprietary information | | Missing Audit Trails | No native logging in the MCP specification; tool calls, parameters, and responses go unrecorded | No forensic path after an incident; compliance gaps in regulated industries | |----------------------------------|---------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------| The risk compounds in [agentic AI](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-vs-ai-agents?ts=markdown) environments specifically. An agent executing a multi-step workflow across several MCP servers can chain tool calls across trust boundaries, moving laterally through systems in ways that are difficult to detect and nearly impossible to trace without infrastructure-level logging. ## How Enterprises Can Govern MCP Adoption Governing MCP at scale requires addressing the problem at the infrastructure layer, not the application layer. Policies that live in documentation or rely on developer discretion will not hold as the number of servers grows. ### Build a Centralized Server Registry The foundation of MCP governance is visibility. Every MCP server running in the enterprise, whether internal, third-party, or pulled from a public registry, should be registered in a central catalog. Security teams should treat unregistered servers the same way they treat unapproved shadow AI tools: as an unknown risk until reviewed. The registry should capture ownership, approval status, data classifications the server can access, and the tools it exposes. ### Enforce Identity and Least-Privilege Access Agents connecting to MCP servers should use scoped, short-lived credentials, not personal access tokens or broad service account permissions. Workload identity principles apply directly: each agent gets the minimum permissions required for its specific task, tied to a verifiable identity that can be revoked instantly. Static credentials stored in environment files should be replaced with credential vaults issuing auto-rotating tokens. ### Apply Role-Based Access Control Access to MCP servers should follow the same [least-privilege](https://www.paloaltonetworks.com/cyberpedia/what-is-the-principle-of-least-privilege?ts=markdown) model applied to other enterprise systems. Different teams, roles, and applications should have access only to the servers and tools their function requires. RBAC applied at the gateway layer prevents both accidental misuse and deliberate abuse without requiring application-level changes. ### Instrument Runtime Visibility Governance without [observability](https://www.paloaltonetworks.com/cyberpedia/observability-in-ai-models?ts=markdown) is incomplete. Every tool call, argument, and response should be logged so security teams can audit usage, detect anomalous patterns, and investigate incidents. In regulated environments, the ability to produce a full audit trail of which agent called which tool with what parameters is not optional. ### Route All Traffic Through an MCP Gateway A centralized [MCP gateway](https://live.paloaltonetworks.com/t5/community-blogs/from-api-to-mcp-gateway-what-changes-for-ai-agent-security/ba-p/1250388) is the enforcement point that makes all other controls consistent. Instead of agents connecting directly to servers scattered across teams and infrastructure, every interaction routes through the gateway. Authentication, policy enforcement, rate limiting, and logging are applied uniformly regardless of which server is being accessed. New servers entering the ecosystem can be placed in a disabled state by default, requiring explicit admin approval before agents can connect. ## Adopting MCP Securely at Enterprise Scale MCP's value is real, and the adoption momentum is not slowing down. The [governance](https://www.paloaltonetworks.com/cyberpedia/ai-trism#:~:text=structure%20is%20clear.-,AI%20governance,-The%20AI%20governance?ts=markdown) model is straightforward in principle: a central registry of approved servers, identity-based access with scoped short-lived credentials, RBAC that maps teams and roles to specific servers and tools, runtime observability that logs every tool call, and a gateway that enforces all of it consistently. What makes this difficult in practice is doing it without slowing down the developer teams driving adoption. Governance that creates friction gets bypassed, and a bypassed control is no control at all. The organizations that will benefit most from MCP are building governance into the foundation early, before sprawl makes it expensive to fix. Enterprises that treat[MCP security](https://www.paloaltonetworks.com/blog/cloud-security/model-context-protocol-mcp-a-security-overview/) as an infrastructure concern, not an afterthought, will be best positioned to capture the value of agentic AI without inheriting its risk. ## MCP Adoption FAQs ### What are the biggest challenges of MCP adoption in enterprises? The primary challenges are governance at scale, security risk from unmanaged servers, lack of visibility into which MCP servers are active across the organization, credential management for agent-to-server communication, and the absence of built-in audit trails in the MCP specification itself. ### Why does enterprise MCP adoption lead to server sprawl? MCP is designed to make integration frictionless. Any developer can spin up a server in minutes, but reviewing, registering, and securing one takes far longer. When adoption outpaces governance, untracked servers accumulate across teams, creating a shadow catalog that security teams cannot monitor or control. ### What governance controls does the MCP specification lack? The MCP specification ships without mandatory authentication, rate limits, spend caps, or audit trails. The trust model assumes servers are benign. There is no built-in mechanism for enterprises to enforce policy, restrict access, or log tool invocations. ### What is an MCP gateway and why does it matter? An MCP gateway is a centralized control layer that sits between AI agents and MCP servers. It enforces authentication, applies RBAC, logs all tool calls, and ensures policy is applied consistently regardless of which server is being accessed. It is the primary mechanism for converting an unmanaged MCP deployment into a governed one. ### How should enterprises start governing MCP servers? The first step is visibility: building a registry of all MCP servers running across the organization. From there, access controls, credential management, and a gateway layer should be introduced to enforce policy at the infrastructure level rather than relying on developer discretion. ### What makes MCP governance different from traditional API governance? MCP servers are invoked by autonomous agents, not humans. This means access decisions happen at machine speed, tool calls can be chained across trust boundaries without human review, and the blast radius of a misconfigured server is amplified by agentic autonomy. Governance must account for this by enforcing policy at runtime, not just at provisioning time. Related Content [What It Takes to Secure Claude Cowork Across the AI Enterprise See how Prisma AIRS AI Gateway provides a centralised control plane and enables runtime security, data protection, agent identity controls, and full visibility.](https://www.paloaltonetworks.com/blog/2026/07/what-it-takes-to-secure-claude-cowork-across-the-ai-enterprise/) [AI Governance for AI-Powered Applications (Whitepaper) Build a governance framework for AI-powered applications, from model inventory to continuous monitoring and compliance](https://www.paloaltonetworks.com/resources/whitepapers/ai-governance?ts=markdown) [Securing and Governing AI Agents at Scale Through a Unified AI Gateway See how Prisma AIRS and the AI gateway provide a unified control plane for enterprise agents.](https://www.paloaltonetworks.com/blog/2026/05/securing-and-governing-ai-agents-at-scale-through-a-unified-ai-gateway/) [The AI Control Plane for the Enterprise Discover, govern, and secure your AI with the Prisma AIRS AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway#contact?ts=markdown) ![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=MCP%20Adoption%20Challenges%3A%20Enterprise%20Risks%20and%20Barriers&body=MCP%20servers%20multiply%20faster%20than%20enterprises%20can%20govern%20them.%20Learn%20what%20the%20challenges%20are%2C%20the%20security%20risks%20it%20creates%2C%20and%20how%20a%20gateway%20layer%20addresses%20it.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges) Back to Top [Previous](https://www.paloaltonetworks.com/cyberpedia/openai-codex-best-practices?ts=markdown) OpenAI Codex Best Practices for Enterprise Teams [Next](https://www.paloaltonetworks.com/cyberpedia/what-is-agentops?ts=markdown) What Is AgentOps? {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language