[](https://www.paloaltonetworks.com/?ts=markdown) * [](https://www.paloaltonetworks.com/?ts=markdown) * Products Products AI Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) Network Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) SASE [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) Security Operations [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) Cloud Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) Observability ^NEW^ [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) Identity Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [![Overview icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Overview](#products-panel-0) * [![AI Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) AI Security](#products-panel-1) * [![Network Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Network Security](#products-panel-2) * [![SASE icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) SASE](#products-panel-3) * [![Security Operations icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Security Operations](#products-panel-4) * [![Cloud Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Cloud Security](#products-panel-5) * [Observability ^NEW^](#products-panel-6) * [![Identity Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Identity Security](#products-panel-7) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) [![AI Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg) AI Security Discover, assess and protect AI apps, agents and employee use of GenAI tools](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [![Network Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg) Network Security AI-powered NetSec with next-gen firewalls, inline defense and unified management](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Security Operations icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg) Security Operations Stop cyberattackers with the industry's premier platform for autonomous security operations](https://www.paloaltonetworks.com/cortex?ts=markdown) [![Observability \& Remediation NEW icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg) Observability \& Remediation ^NEW^ Prevent downtime with the AI-driven platform that delivers autonomous remediation](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![SASE icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg) SASE Protect with AI, secure AI use and operate with AI using agentic Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) [![Identity Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg) Identity Security Identity security platform to secure every identity: human, machine and agentic](https://www.paloaltonetworks.com/idira?ts=markdown) [![Cloud Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg) Cloud Security Prevent risks from code to cloud with the leading agentic cloud security platform](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![AI Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) [![Network Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) [![SASE logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) [![Security Operations logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) [![Cloud Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) [![Observability NEW logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) [![Identity Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * Solutions Solutions By Use Case [![Drive AI Transformation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ai-page/teaser-block/teaser-icon-2.svg) Drive AI Transformation Scale enterprise AI adoption across employees, applications and agents with confidence and control](https://www.paloaltonetworks.com/ai-security?ts=markdown) [![Accelerate Cloud Transformation icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Accelerate Cloud Transformation Build fast and innovate fearlessly with AI-driven protection from code to cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![Secure AI Coding icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure AI Coding Let AI coding do more, with you in control. Protect data, govern agents and control AI costs](https://www.paloaltonetworks.com/secure-ai-coding?ts=markdown) [![Secure Every Identity icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Secure Every Identity Stop identity-led breaches: Secure human, machine, and agentic identities with zero trust](https://www.paloaltonetworks.com/idira?ts=markdown) [![Enable Autonomous SOC icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Enable Autonomous SOC Fight AI with AI to stop threats at machine speed with the power of analytics and automation](https://www.paloaltonetworks.com/cortex/fight-ai-with-ai?ts=markdown) [![Secure Critical Infrastructure icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure Critical Infrastructure Stop machine-speed threats across OT, 5G and IoT with AI-driven cyber defense](https://www.paloaltonetworks.com/securing-critical-infrastructure?ts=markdown) [![Secure the Hybrid Network icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Secure the Hybrid Network Stay ahead of AI-driven attacks with unified network security across hybrid environments](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Automate Root-Cause Analysis icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Automate Root-Cause Analysis Respond autonomously to incidents and accelerate remediation with agentic AI](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![Frontier AI Defense icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-Unit42.svg) Frontier AI Defense Use defender-grade models to stop AI-speed attacks before they start](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * Services Services Security Services [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Managed Agentic Endpoint Security](https://www.paloaltonetworks.com/unit42/respond/managed-agentic-endpoint-security?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) Customer Services [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Services Overview](#services-panel-0) * [Security Services](#services-panel-1) * [Managed Firewalls](#services-panel-2) * [Customer Services](#services-panel-3) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) [![Security Services logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Managed Agentic Endpoint Security](https://www.paloaltonetworks.com/unit42/respond/managed-agentic-endpoint-security?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) * Industries Industries [![Financial Services icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/financial-icon-2.svg) Financial Services Secure with AI cybersecurity, fraud and ransomware prevention, compliance, and customer data protection](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown) [![Manufacturing icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/manufacturing-icon-2.svg) Manufacturing Secure with OT security, ransomware defense, industrial cybersecurity, supply chain resilience, and continuity](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown) [![Retail and Hospitality icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/retail-icon-2.svg) Retail and Hospitality Secure with payment security, PCI compliance, ransomware and fraud prevention, and data protection](https://www.paloaltonetworks.com/industry/retail?ts=markdown) [![Healthcare and Life Sciences icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/healthcare-icon-2.svg) Healthcare and Life Sciences Secure patient and clinical data, medical device security, ransomware defense, and HIPAA compliance](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown) [![Public Sector icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/public-sector-icon-2.svg) Public Sector Secure with Zero Trust, cyber defense, compliance, infrastructure protection, and citizen data security](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown) [![Utilities icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/utilities-icon-2.svg) Utilities Secure with power grid protection, OT network security, ransomware defense, and critical infrastructure security](https://www.paloaltonetworks.com/industry/electric-utilities?ts=markdown) [![Transportation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/transportation-icon-2.svg) Transportation Secure OT and connected infrastructure protection, ransomware defense, supply chain security, compliance](https://www.paloaltonetworks.com/industry/transportation-security?ts=markdown) [![Small and Medium Business icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/smb-icon-2.svg) Small and Medium Business Secure against cyber threats using AI-powered endpoint, network, browser, cloud, and MDR](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown) * Partners Partners NextWave * [Partner Program](https://www.paloaltonetworks.com/partners/nextwave-partner-portal-login?ts=markdown) * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner) * [Request Partner Portal Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess) * [Partner Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator) Partner Ecosystem [Explore All Partners Find the right partner network tailored to your business needs, cloud environments, and security requirements](https://www.paloaltonetworks.com/partners?ts=markdown) [Cloud Service Partners Bring cloud native security and compliance to the entire development lifecycle](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown) [Frontier AI Alliance Outpace today's cyberattacks through a global ecosystem of leaders orchestrating unified defenses](https://www.paloaltonetworks.com/frontier?ts=markdown) [Global System Integrators Speed and secure digital transformation with the industry's best technology, people and intelligence](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown) [Managed Security Service Providers Gain valuable resource oversight to help your businesses administer security strategies](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown) [Resellers Deliver the most comprehensive cybersecurity portfolio while expanding opportunities and profitability](https://www.paloaltonetworks.com/partners/resellers?ts=markdown) [Service Providers Protect mobile users, devices and applications with effective, flexible and easy to deploy cybersecurity](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown) [Technology Partners Advance security and transformation with innovative technology partner integrations](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown) * Resources Resources ![Learn icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/resource-library-icon.svg) Learn * [Resource Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Analyst Reports](https://www.paloaltonetworks.com/resources/research?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown) * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Threat Vector Podcast](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Knowledgebase](https://knowledgebase.paloaltonetworks.com/) * [Technical Documentation](https://docs.paloaltonetworks.com/) ![Engage icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/engage-icon-2.svg) Engage * [Webinars](https://www.paloaltonetworks.com/resources/webinars?ts=markdown) * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown) * [Test Drive](https://www.paloaltonetworks.com/resources/test-drives?ts=markdown) * [On-Demand](https://www.paloaltonetworks.com/ondemand?ts=markdown) ![Connect icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/connect-icon-2.svg) Connect * [Executive Briefings](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown) * [Events](https://events.paloaltonetworks.com/) * [Live Community](https://live.paloaltonetworks.com/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) ![Discover icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/discover-icon-2.svg) Discover * [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown) * [Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown) * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown) * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown) ![Company icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en) * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/) * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown) * [Office Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * ![search magnifying glass](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * us Language * USA (ENGLISH) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au/cyberpedia/what-is-virtual-patching) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br/cyberpedia/what-is-virtual-patching) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca/cyberpedia/what-is-virtual-patching) * [CHINA (简体中文)](https://www.paloaltonetworks.cn/cyberpedia/what-is-virtual-patching) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr/cyberpedia/what-is-virtual-patching) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de/cyberpedia/what-is-virtual-patching) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in/cyberpedia/what-is-virtual-patching) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it/cyberpedia/what-is-virtual-patching) * [JAPAN (日本語)](https://www.paloaltonetworks.jp/cyberpedia/what-is-virtual-patching) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr/cyberpedia/what-is-virtual-patching) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat/cyberpedia/what-is-virtual-patching) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx/cyberpedia/what-is-virtual-patching) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg/cyberpedia/what-is-virtual-patching) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es/cyberpedia/what-is-virtual-patching) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw/cyberpedia/what-is-virtual-patching) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk/cyberpedia/what-is-virtual-patching) * Accounts \& Support Accounts \& Support * Accounts * Customer * Partner * Employee * [Login to Download](https://www.paloaltonetworks.com/login?ts=markdown) * [Become a Member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * Support * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown) [Introducing Cortex XCOR: Observability, reimagined. Discover now.](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [](https://www.paloaltonetworks.com/?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search) Close search modal 1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) 2. [Threats](https://www.paloaltonetworks.com/cyberpedia/threat?ts=markdown) 3. [Network Security](https://www.paloaltonetworks.com/cyberpedia/what-is-network-security?ts=markdown) 4. [What Is Virtual Patching?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching?ts=markdown) Table of contents * What Is Virtual Patching? Definition, How It Works \& Guide * [Virtual Patching Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#virtual?ts=markdown) * [What Is a Virtual Patch?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#what?ts=markdown) * [How Does Virtual Patching Work?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#how?ts=markdown) * [Virtual Patching vs. Traditional Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#vs?ts=markdown) * [When Should You Use Virtual Patching?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching##?ts=markdown) * [Virtual Patching and Zero-Day Vulnerabilities](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#zero?ts=markdown) * [Virtual Patching for OT and Critical Infrastructure](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#critical?ts=markdown) * [Benefits of Virtual Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#benefits?ts=markdown) * [Virtual Patching Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#best?ts=markdown) * [Limitations of Virtual Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#limitations?ts=markdown) * [How Frontier AI Is Changing Vulnerability Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#changing?ts=markdown) * [What Is Frontier Virtual Patching?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#frontier?ts=markdown) * [Virtual Patching FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#faqs?ts=markdown) * [What is Network Security?](https://www.paloaltonetworks.com/cyberpedia/what-is-network-security?ts=markdown) * [What Is Critical Infrastructure? Sectors and Security](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure?ts=markdown) * [What Qualifies as Critical Infrastructure?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#what?ts=markdown) * [What Are the 16 Critical Infrastructure Sectors?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#critical?ts=markdown) * [Why Is Critical Infrastructure Security Important?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#why?ts=markdown) * [What Is Critical Infrastructure Cybersecurity?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#critical?ts=markdown) * [What Are the Main Threats to Critical Infrastructure?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#main?ts=markdown) * [Why Is Critical Infrastructure Difficult to Secure?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#difficult?ts=markdown) * [How Can Organizations Protect Critical Infrastructure?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#protect?ts=markdown) * [What Is the Role of Zero Trust in Critical Infrastructure?](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#role?ts=markdown) * [How Palo Alto Networks Helps Secure Critical Infrastructure](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#helps?ts=markdown) * [Critical Infrastructure FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-critical-infrastructure#faqs?ts=markdown) * [What Is IT/OT Convergence?](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence?ts=markdown) * [What Is OT?](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#ot?ts=markdown) * [What Is the Difference Between IT and OT?](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#difference?ts=markdown) * [How and Why IT and OT Are Converging](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#converging?ts=markdown) * [Types of IT/OT Convergence](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#types?ts=markdown) * [The Role of IoT and IIoT in IT/OT Convergence](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#convergence?ts=markdown) * [IT/OT Security Convergence](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#security?ts=markdown) * [Impacts of IT/OT Convergence on ICS Security](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#icssecurity?ts=markdown) * [IT/OT Convergence Benefits](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#benefits?ts=markdown) * [IT/OT Convergence Challenges](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#challenges?ts=markdown) * [IT/OT Convergence Use Cases and Examples](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#cases?ts=markdown) * [IT/OT Convergence Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#practices?ts=markdown) * [IT/OT Convergence FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-it-ot-convergence#faq?ts=markdown) * [What Is the Difference Between IT and OT? | IT vs. OT](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot?ts=markdown) * [What Is Information Technology (IT)?](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#information-technology?ts=markdown) * [What Is Operational Technology?](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#operational-technology?ts=markdown) * [What Are the Differences Between IT and OT?](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#differences?ts=markdown) * [What Are the Similarities Between IT and OT?](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#similarities?ts=markdown) * [Comparing OT vs. IT Devices](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#comparing?ts=markdown) * [IT and OT Convergence](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#convergence?ts=markdown) * [Why IT and OT Teams Must Collaborate](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#why?ts=markdown) * [IT vs. OT FAQs](https://www.paloaltonetworks.com/cyberpedia/it-vs-ot#faqs?ts=markdown) * [What is Microsoft Cloud and How to Safely Migrate To It](https://www.paloaltonetworks.com/cyberpedia/what-is-microsoft-cloud-and-how-to-safely-migrate-to-it?ts=markdown) * [How to Safely Enable Microsoft Apps on the Network](https://www.paloaltonetworks.com/cyberpedia/how-to-safely-enable-microsoft-apps-on-the-network?ts=markdown) * [What Is Network Detection and Response (NDR)?](https://www.paloaltonetworks.com/cyberpedia/what-is-network-detection-and-response?ts=markdown) * [What Types of Threats Do Network Detection and Response Solutions Uncover?](https://www.paloaltonetworks.com/cyberpedia/what-is-network-detection-and-response#what?ts=markdown) * [Five Benefits of Network Detection and Response](https://www.paloaltonetworks.com/cyberpedia/what-is-network-detection-and-response#five?ts=markdown) * [The Shortcomings of Network Detection and Response](https://www.paloaltonetworks.com/cyberpedia/what-is-network-detection-and-response#the?ts=markdown) * [Network Detection and Response FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-network-detection-and-response#faqs?ts=markdown) * [What Is Network Security Management?](https://www.paloaltonetworks.com/cyberpedia/what-is-network-security-management?ts=markdown) * [What Is Network as a Service (NaaS)?](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas?ts=markdown) * [How Does Network as a Service (NaaS) Work?](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas#work?ts=markdown) * [How NaaS Developed](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas#developed?ts=markdown) * [Advantages of Network as a Service (NaaS)](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas#advantages?ts=markdown) * [Challenges of Naas](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas#challenges?ts=markdown) * [How NaaS Relates to SASE](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas#relates?ts=markdown) * [Is Network as a Service (NaaS) Right for My Enterprise?](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas#enterprise?ts=markdown) * [Network as a Service (NaaS) FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-network-as-a-service-naas#faqs?ts=markdown) # What Is Virtual Patching? 5 min. read [Explore Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) Table of contents * * [Virtual Patching Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#virtual?ts=markdown) * [What Is a Virtual Patch?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#what?ts=markdown) * [How Does Virtual Patching Work?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#how?ts=markdown) * [Virtual Patching vs. Traditional Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#vs?ts=markdown) * [When Should You Use Virtual Patching?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching##?ts=markdown) * [Virtual Patching and Zero-Day Vulnerabilities](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#zero?ts=markdown) * [Virtual Patching for OT and Critical Infrastructure](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#critical?ts=markdown) * [Benefits of Virtual Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#benefits?ts=markdown) * [Virtual Patching Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#best?ts=markdown) * [Limitations of Virtual Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#limitations?ts=markdown) * [How Frontier AI Is Changing Vulnerability Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#changing?ts=markdown) * [What Is Frontier Virtual Patching?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#frontier?ts=markdown) * [Virtual Patching FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#faqs?ts=markdown) 1. Virtual Patching Explained * * [Virtual Patching Explained](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#virtual?ts=markdown) * [What Is a Virtual Patch?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#what?ts=markdown) * [How Does Virtual Patching Work?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#how?ts=markdown) * [Virtual Patching vs. Traditional Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#vs?ts=markdown) * [When Should You Use Virtual Patching?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching##?ts=markdown) * [Virtual Patching and Zero-Day Vulnerabilities](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#zero?ts=markdown) * [Virtual Patching for OT and Critical Infrastructure](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#critical?ts=markdown) * [Benefits of Virtual Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#benefits?ts=markdown) * [Virtual Patching Best Practices](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#best?ts=markdown) * [Limitations of Virtual Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#limitations?ts=markdown) * [How Frontier AI Is Changing Vulnerability Patching](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#changing?ts=markdown) * [What Is Frontier Virtual Patching?](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#frontier?ts=markdown) * [Virtual Patching FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching#faqs?ts=markdown) Virtual patching is a network security control that inspects and intercepts malicious exploit payloads before they reach vulnerable systems. By applying inline security signatures at the perimeter, firewall, or web layer, virtual patching blocks cyber threats instantly without altering software source code or disrupting enterprise operations. ## Virtual Patching Explained Designed to prevent the exploitation of software vulnerabilities without altering underlying code, virtual patching leverages security controls like [intrusion prevention systems (IPS)](https://www.paloaltonetworks.com/cyberpedia/what-is-an-intrusion-prevention-system-ips?ts=markdown) and [web application firewalls (WAF)](https://www.paloaltonetworks.com/cyberpedia/what-is-a-web-application-firewall?ts=markdown). These solutions inspect incoming traffic and apply immediate safeguards, shielding systems while teams develop, test, and roll out permanent patches. This mechanism mitigates exposure rather than eliminating the flaw itself. As a result, its overall performance hinges on the specific protections in place, the network paths monitored, and the potential vectors an attacker might exploit. This distinction is critical when safeguarding operational technology, legacy architecture, or mission-critical applications. Because standard software updates frequently require vendor authorization, extensive compatibility validation, or scheduled downtime, virtual patching offers a vital risk-mitigation buffer---preventing known threat vectors from remaining unguarded during patch preparation. Key Points * **Immediate risk mitigation**: Intercepts exploit payloads at the network layer long before software vendors release official code patches. \* **Zero business downtime**: Eliminates the operational necessity of rebooting mission-critical servers, maintaining continuous business uptime. \* **Legacy system protection**: Shields end-of-life and unsupported software where vendor security updates are no longer developed or issued. \* **Operational cost reduction**: Provides IT and security operations teams with flexible time windows to thoroughly test and deploy permanent code patches. \* **Automated compliance**: Helps organizations satisfy stringent regulatory vulnerability management requirements, such as PCI DSS and HIPAA. ## What Is a Virtual Patch? A virtual patch is a security rule or set of controls designed to interrupt exploitation of a specific vulnerability without changing the affected application, operating system or firmware. Instead of repairing the vulnerable component, it blocks the traffic or inputs required to exploit it. For example, a web application may contain a flaw in how it processes a request parameter. A virtual patch could reject requests that violate the expected format for that parameter. The application remains vulnerable internally, but the enforcement layer restricts a covered route to exploitation. Virtual patching is sometimes called vulnerability shielding. It is a use case for security enforcement technologies, rather than a single product category. A next generation firewall (NGFW), network IPS, WAF or appropriate host-based control may provide it, depending on the vulnerability and architecture. A generic firewall rule that blocks a port may also reduce exposure, but it is usually broader than a vulnerability-specific virtual patch. Both can be useful compensating controls; the important question is which exploitation paths each control actually prevents. ## How Does Virtual Patching Work? Virtual patching connects vulnerability information to an enforcement point that can inspect and block relevant activity. A complete process includes validation, monitoring and permanent remediation, not just rule deployment. ### 1. Discover the Vulnerability and Identify Affected Assets The process begins with a vendor advisory, security research, internal testing or another source of vulnerability intelligence. Teams determine which software versions, services and devices may be affected. [Vulnerability scanning](https://www.paloaltonetworks.com/cyberpedia/vulnerability-scanning?ts=markdown) helps identify exposed components. Asset inventories and application ownership records provide the context needed to distinguish a vulnerable installation from an unaffected or unreachable one. ### 2. Assess Exploitability and Business Risk A severity rating alone does not establish urgency. Teams also examine whether the vulnerable function is enabled, whether attackers can reach it, whether exploitation is occurring and what the affected asset supports. An internet-facing service with evidence of exploitation may require immediate action. An isolated system may present a different risk, although isolation must be verified. [Vulnerability management](https://www.paloaltonetworks.com/cyberpedia/vulnerability-management?ts=markdown) provides the broader process for prioritizing these decisions. ### 3. Create or Obtain a Relevant Protection A security vendor or internal team develops a protection for the vulnerable behavior or exploitation path. Depending on the technology, this may involve vulnerability signatures, protocol validation or restrictions on inputs reaching a specific application function. Coverage should be mapped to affected versions, protocols and deployment conditions. A rule that blocks one demonstration exploit does not necessarily cover every way to exploit the same flaw. ### 4. Test the Protection and Enforce It Inline Before broad deployment, teams validate that the protection blocks representative exploitation attempts without disrupting legitimate activity. Testing should also assess variations in request formatting and alternate routes to the application. The enforcement point must sit on the relevant traffic path. If inspection requires access to encrypted content, the organization must establish an appropriate decryption or termination architecture. Installing a protection without enabling inspection on the affected path leaves a coverage gap. ### 5. Monitor Blocks, Coverage and Operational Impact After enforcement begins, security teams monitor detections, blocked attempts, application errors and performance. They investigate false positives and confirm that exceptions do not reopen the vulnerability. Logs should connect the protection to the affected asset and vulnerability record. This makes it possible to distinguish a deployed rule from a verified mitigation. ### 6. Apply and Verify Permanent Remediation Application and infrastructure teams continue work on the permanent fix. That may mean installing a vendor patch, upgrading a dependency, correcting code or replacing an unsupported product. After deployment, teams verify that the affected versions and vulnerable behavior are no longer present. A virtual patch should not cause the underlying remediation ticket to disappear from the backlog. ### 7. Review the Virtual Patch Once remediation is verified across the affected environment, review whether the temporary protection should remain, be narrowed or be retired. Shared protections may still be needed for other assets. Removal should follow change control and include a rollback plan. ## Virtual Patching vs. Traditional Patching Virtual patching mitigates exploitation through a separate security control. Traditional patching changes the affected software to correct the vulnerability. Organizations often use both: apply protection promptly, then complete permanent remediation. | Comparison | Virtual Patching | Traditional Patching | | **What changes?** | A security policy, rule or enforcement control | Application code, a software component, operating system or firmware | | **Removes the underlying flaw?** | No | Intended to, when the correct fix is successfully applied | | **Deployment speed** | Can be rapid when a tested protection and enforcement point are available | Depends on vendor availability, testing and deployment readiness | | **Requires a vendor software fix?** | Not always | Usually, unless the organization maintains the affected code | | **Requires downtime?** | Often avoids restarting the protected system; control changes still need testing | May require a restart or maintenance window; some updates do not | | **Protection before a software patch exists** | Possible for covered exploitation paths | Requires an available fix | | **Main dependency** | Inspection coverage, protection quality and correct enforcement | Correct patch selection and successful installation across affected assets | | **Primary role** | Interim or compensating risk mitigation | Remediation of the software vulnerability | |-----------------------------------------------|----------------------------------------------------------------------------------|----------------------------------------------------------------------------| ### Virtual Patching vs. Patch Management [Patch management](https://www.paloaltonetworks.com/cyberpedia/patch-management?ts=markdown) is the ongoing process of identifying, evaluating, testing, deploying and verifying software updates. Virtual patching is a protective measure that can support this process when immediate deployment is not possible. The distinction is operational as well as technical. A security team may own the virtual patch, while an application owner controls the software update. Both activities should reference the same vulnerability, asset inventory, deadline and closure criteria. ## Virtual Patching With IPS vs. WAF Virtual patching is not limited to web applications. Next generation firewall(NGFW), network IPS and WAF technologies can both block exploitation, but they inspect different types of traffic and protect different parts of an environment. ### IPS and Network-Level Virtual Patching An [intrusion prevention system](https://www.paloaltonetworks.com/cyberpedia/what-is-an-intrusion-prevention-system-ips?ts=markdown) examines network traffic and can block activity associated with exploitation. Depending on its protocol support and placement, it may help protect servers, applications and infrastructure communicating across multiple network protocols. Network-level virtual patching is useful when a vulnerability can be exploited through traffic that passes through the IPS. Coverage depends on supported decoders, enabled protections and inspection settings. An IPS cannot protect a network path it does not see or a local exploit that never crosses its enforcement point. ### WAF and Application-Layer Virtual Patching A [web application firewall](https://www.paloaltonetworks.com/cyberpedia/what-is-a-web-application-firewall?ts=markdown) inspects HTTP and HTTPS application traffic. WAF-based virtual patching can block requests targeting vulnerable web application or API functions, subject to the WAF's capabilities and configuration. For example, a protection may restrict unexpected input to a vulnerable endpoint. However, requests that reach an unprotected origin directly could bypass the WAF. Effective deployment therefore includes controlling access to the origin, not simply enabling a rule at the public-facing proxy. | Consideration | IPS/network virtual patching | WAF virtual patching | | **Primary traffic scope** | Supported network and application protocols | Web application and API traffic over HTTP/HTTPS | | **Typical placement** | Network boundaries, internal segments or workload traffic paths | Reverse proxy, application edge or another web inspection point | | **Potential use cases** | Covered exploits against services, servers and infrastructure | Covered exploits against web applications and APIs | | **Important coverage check** | Does affected traffic cross an inspecting IPS with the relevant protection enabled? | Do all relevant requests pass through the WAF, including access to the origin? | |------------------------------|-------------------------------------------------------------------------------------|--------------------------------------------------------------------------------| IPS and WAF controls can complement each other. Selection should follow the vulnerable service, attack path and inspection requirements rather than an assumption that one technology covers every vulnerability. ## When Should You Use Virtual Patching? Virtual patching is most useful when exploitation risk requires a faster response than permanent remediation can provide. ### Newly Disclosed CVEs and Emergency Vulnerabilities A newly disclosed vulnerability may affect many assets simultaneously. Virtual patching can provide interim protection where a relevant rule exists while teams identify affected installations, prioritize internet-facing systems and deploy the permanent fix. A CVE identifier is a reference, not proof of coverage. Teams should confirm the affected versions, protection identifiers and required configuration before treating a vulnerability as mitigated. ### Patch Testing and Maintenance Windows Business-critical updates may require regression testing, backups and coordinated downtime. A validated virtual patch can reduce risk during that preparation period. It should accompany a defined remediation deadline, rather than become a reason to postpone an update indefinitely. ### Legacy and End-of-Life Systems Older applications and unsupported operating systems may lack vendor fixes. Virtual patching may block some exploitation paths, but it does not restore vendor support or address every weakness in obsolete software. Replacement, isolation or decommissioning remains part of the risk decision. ### Third-Party Applications Organizations cannot always modify commercial application code or dictate a supplier's release schedule. Where they control the relevant traffic path, they may be able to apply an external protection while working with the supplier on remediation. For a fully managed SaaS application, that control may belong to the service provider. Customers should confirm the provider's mitigation and remediation status rather than assume their own network security controls can patch the service virtually. ### OT, Medical Devices and Critical Infrastructure Industrial controllers, connected medical devices and critical infrastructure systems may have restricted maintenance windows or vendor validation requirements. Virtual patching can contribute to a layered protection strategy where the vulnerability is reachable through inspected traffic and the security control is appropriate for the environment. ### Vulnerabilities Without an Available Patch If no software fix exists, organizations should evaluate available exploit prevention alongside service restrictions, access controls and segmentation. Where adequate mitigation cannot be verified, disabling the affected function or isolating the system may be necessary. ## Virtual Patching and Zero-Day Vulnerabilities Virtual patching can help protect against a zero-day vulnerability when defenders have enough information to develop a relevant protection, even if no public advisory or vendor patch exists. It does not guarantee protection against every unknown vulnerability. Three situations are useful to distinguish: * **A known vulnerability awaiting deployment of a fix**: A protection shields affected systems while the organization tests and installs the patch. * **A privately disclosed vulnerability**: A researcher, vendor or trusted partner provides information that enables protection development before public disclosure. * **An entirely unknown exploitation technique**: Broader exploit prevention may detect related malicious behavior, but coverage should not be assumed to constitute a vulnerability-specific virtual patch. A [zero-day attack](https://www.paloaltonetworks.com/cyberpedia/zero-day-attacks-explained-risks-examples-prevention?ts=markdown) and a missing CVE identifier are not interchangeable concepts. Public identifiers, vendor awareness, patch availability and active exploitation describe different aspects of a vulnerability's status. The practical question is whether the organization has a verified protection for the relevant attack path. That question remains important before and after disclosure. ## Virtual Patching for OT and Critical Infrastructure Virtual patching can support [OT security](https://www.paloaltonetworks.com/cyberpedia/what-is-ot-security?ts=markdown) by limiting covered network exploitation attempts against systems that cannot be updated immediately. Industrial environments require additional care because changes to traffic handling can affect availability, production and safety-related operations. Consider a vulnerable service on an industrial engineering workstation. If traffic to that service passes through an appropriately configured inspection point, a relevant protection may block exploitation while operations personnel prepare an approved update. That protection does not automatically cover a controller elsewhere on the network, a different protocol or a local maintenance connection. An OT deployment should establish: * Which assets, software versions and communication paths are affected. * Whether the enforcement technology understands the relevant protocols. * How blocking, latency and failure behavior could affect operations. * Which legitimate engineering and maintenance activities must continue. * How plant operations, engineering, security and the equipment vendor will validate changes. * When the asset will be patched, upgraded, replaced or reviewed for continued operation. [Network segmentation](https://www.paloaltonetworks.com/cyberpedia/what-is-network-segmentation?ts=markdown) provides a complementary control by limiting which systems can communicate. Virtual patching addresses covered exploitation attempts within inspected traffic; segmentation reduces reachable paths. Neither eliminates the need to manage the vulnerable asset throughout its lifecycle. ## Benefits of Virtual Patching Virtual patching gives security and operations teams an additional response option between discovering a vulnerability and completing a permanent fix. **Faster interim protection**: Where a relevant protection is available, enforcement may begin before application owners can complete software updates. **More time for controlled remediation**: Teams can continue compatibility testing and maintenance planning while reducing exposure to covered attacks. **Protection for difficult-to-update assets**: External controls may provide a mitigation option when the affected software cannot immediately be modified. **Coordinated protection across multiple assets**: A shared enforcement point may protect several vulnerable systems, provided all relevant traffic crosses it and the protection applies to each system. **Visibility into exploitation attempts**: Protection logs can help identify targeted assets and support investigation, prioritization and verification. These benefits depend on deployment conditions. Faster protection is useful only when the control is active, relevant and positioned to inspect the attack. ## Virtual Patching Best Practices ### Maintain an Accurate Asset and Exposure Inventory Map affected versions to owners, business services and reachable interfaces. Include cloud workloads, internal services and legacy devices. Reconcile scanner findings with asset records so that temporary protections have a clearly defined scope. ### Prioritize by Exploitation and Business Impact Combine vulnerability severity with evidence of exploitation, exposure and asset importance. [Cyber threat intelligence](https://www.paloaltonetworks.com/cyberpedia/what-is-cyberthreat-intelligence-cti?ts=markdown) can inform urgency, but decisions should also account for the organization's own environment. ### Verify Protection Coverage Document the protection identifier, affected vulnerability, inspection requirements and enforcement locations. Check alternate ports, internal access, direct-origin routes and encrypted sessions. A rule update alone does not demonstrate complete coverage. ### Validate Security and Application Behavior Test in an authorized environment using representative legitimate activity and safe exploit validation methods. Confirm both that covered attacks are blocked and that business functions continue to work. Evaluate variants rather than relying on a single sample request. ### Define Ownership and an Expiration Review Assign owners for protection operation and permanent remediation. Record exceptions, review dates and residual risk. If an application cannot be patched, require a documented decision about isolation, replacement or continued operation. ### Monitor and Reassess Track blocked attempts, false positives, policy exceptions and traffic changes. Revalidate when applications move, network routes change or new exploit information emerges. An effective control can become ineffective if traffic stops passing through it. ### Measure Protection and Remediation Separately Track time from vulnerability identification to verified enforcement, the proportion of affected assets with validated coverage, and the age of outstanding permanent fixes. Pair these measures with false-positive impact and exceptions. High block counts alone do not establish that all vulnerable systems are protected. ## Limitations of Virtual Patching Virtual patching reduces specific risks; it does not make vulnerable software secure in every context. **The underlying flaw remains**. If the control is disabled, bypassed or removed, the exploitation path may become available again. **Inspection has boundaries**. Uninspected encryption, unsupported protocols, local activity or traffic outside the enforcement path may escape protection. **Attack variants may evade a rule**. A protection focused narrowly on one payload may miss another route to the same vulnerable behavior. **Blocking can affect legitimate operations**. Overly broad rules may interrupt valid requests, making testing, monitoring and controlled rollback necessary. **Coverage may be incomplete**. Some vulnerabilities do not expose a distinguishable network pattern. Logic flaws, local privilege escalation and abuse of legitimate permissions may require different controls. **It does not reverse a compromise**. Blocking new exploitation does not remove malware, revoke stolen credentials or investigate earlier access. If exploitation may already have occurred, incident response must proceed alongside mitigation. **It can accumulate remediation debt**. Temporary protections that lack owners or review dates can conceal an expanding inventory of vulnerable software. ## How Frontier AI Is Changing Vulnerability Patching [Frontier AI](https://www.paloaltonetworks.com/cyberpedia/what-is-frontier-ai?ts=markdown) is changing how security research and software analysis can be performed. Advanced models can assist with code review, vulnerability investigation and exploit development. Defenders can use related capabilities to investigate flaws and develop protections earlier. This creates pressure on two intervals: the time needed for a vendor to produce a fix and the time needed for customers to deploy it. Accelerating software remediation remains valuable, but it does not remove testing requirements or operational constraints. A complementary response is to connect discovery with protection sooner. Instead of waiting for a public advisory to trigger every defensive action, trusted vulnerability-sharing arrangements and proactive research can provide information for protection development before disclosure. Pre-disclosure protection describes when a control becomes available relative to public disclosure. It does not mean every undisclosed vulnerability is covered. Likewise, AI-generated exploitation describes how an attack may be developed, not a separate vulnerability class that every virtual patch can automatically prevent. ## What Is Frontier Virtual Patching? Frontier Virtual Patching is Palo Alto Networks' capability for delivering network protections informed by proactive vulnerability discovery and early vulnerability information. Palo Alto Networks introduces it through Advanced Threat Prevention Plus, with an emphasis on developing protections before public disclosure or the availability of an official software patch. In its PAN-OS 12.2 announcement, Palo Alto Networks describes two proactive inputs: NOVA, its Network and Open-Source Vulnerability Analyzer, and vulnerability information shared through its Critical Defense Program. These complement established vulnerability and exploit intelligence sources. The company uses the term "vaulted protection" for an approach intended to provide protection without revealing sensitive vulnerability details. This is Palo Alto Networks terminology for the capability, rather than a universal virtual-patching standard. The distinction is earlier protection development and delivery. The underlying purpose remains consistent with virtual patching: interrupt covered exploitation attempts while the affected software still requires remediation. Protection scope, supported deployments and inspection requirements must be evaluated for the environment. Learn more about [Advanced Threat Prevention and Frontier Virtual Patching](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown). ## Virtual Patching FAQs ### How Can You Protect Systems Before a Patch Is Available? Use a relevant, validated virtual patch where available, restrict access to affected services, disable unnecessary vulnerable functionality and segment exposed assets. Monitor for exploitation and work with the vendor on remediation. If the remaining risk is unacceptable, isolate or suspend the affected service. ### How Do You Protect Unpatched Vulnerabilities? First identify affected assets and reachable exploitation paths. Apply supported exploit-prevention controls, verify enforcement and limit access. Keep a tracked remediation plan. "Unpatched" describes the software's state; a security rule does not change that state even when it reduces exploitation risk. ### Can an IPS Virtually Patch Vulnerabilities? Yes. An IPS can provide virtual patching when it has a relevant protection and inspects the traffic required to exploit the vulnerability. Confirm protocol support, enabled blocking actions and traffic visibility before treating an affected system as covered. ### Is Virtual Patching the Same as a WAF? No. Virtual patching is a protective technique. A WAF is one technology that can implement it for web applications and APIs. An IPS or suitable host-based control may also provide virtual patching for supported vulnerabilities. ### Can Virtual Patching Protect Against Zero-Day Attacks? It can help when a relevant protection exists before public disclosure or patch availability. It does not guarantee prevention of all unknown attacks. Broader behavioral exploit prevention can complement vulnerability-specific virtual patches, but each control has coverage limits. ### Can Virtual Patching Protect Legacy Systems? It may reduce exposure to covered exploits against legacy systems when the attack crosses a suitable enforcement point. It does not resolve unsupported software, insecure design or every local attack path. Legacy protection should include segmentation and a replacement or retirement plan. ### Is Virtual Patching a Compensating Control? Virtual patching can serve as a compensating control when a preferred fix cannot immediately be applied. Whether it satisfies a specific compliance requirement depends on that requirement, the control's effectiveness and the organization's documented assessment. Deployment alone does not establish compliance. ### Is Virtual Patching Permanent? It does not permanently correct vulnerable software. Some protections may remain in use for extended periods, but the underlying asset still requires risk management. A permanent solution may involve patching, upgrading, replacing or retiring the affected component. ### Does Virtual Patching Require an Agent? Not always. Network IPS and WAF deployments can enforce protections without an agent on the protected system. Host-based implementations may require installed software. Requirements depend on the enforcement technology and deployment model. ### When Should a Virtual Patch Be Removed? Review it after permanent remediation is verified across all affected assets. Check whether other systems still rely on the protection before changing a shared policy. Retain or retire it through change control based on continuing coverage needs and operational impact. ### Does a Virtual Patch Make a Vulnerability Scan Pass? Not necessarily. A scanner may continue to detect the vulnerable software version because virtual patching does not change it. Track verified mitigation separately from remediation status and close the underlying finding only when the applicable closure criteria are met. ### What Is Pre-Disclosure Vulnerability Protection? Pre-disclosure vulnerability protection is a control developed or deployed before a vulnerability becomes public. It relies on earlier knowledge of the flaw or a relevant exploitation technique. A public CVE identifier is not required for a protection to exist, but coverage still needs validation. Related content [Intrusion Prevention System Overview Learn how inline IPS capabilities block exploit payloads and secure network perimeters.](https://www.paloaltonetworks.com/cyberpedia/what-is-an-intrusion-prevention-system-ips?ts=markdown) [Advanced Threat Prevention Technology Guide Discover how Precision AI and inline deep learning prevent unknown zero-day attacks.](https://www.paloaltonetworks.com/resources/datasheets/advanced-threat-prevention?ts=markdown) [Advanced Threat Prevention Solution Explore how Palo Alto Networks delivers automated virtual patching across network environments.](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) [Request a Security Demo Schedule an interactive product demo to evaluate real-time inline vulnerability mitigation.](https://www.paloaltonetworks.com/demos?ts=markdown) ![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=What%20Is%20Virtual%20Patching%3F%20Definition%2C%20How%20It%20Works%20%26%20Guide&body=Virtual%20patching%20blocks%20exploits%20at%20the%20network%20level%20without%20modifying%20source%20code.%20Learn%20how%20it%20mitigates%20zero-day%20risks%20and%20prevents%20system%20downtime.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/what-is-virtual-patching) Back to Top [Next](https://www.paloaltonetworks.com/cyberpedia/what-is-network-security?ts=markdown) What is Network Security? {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center-subscribe.html) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language