Introducing
Cortex Cloud

Deploying web application and API protection can be difficult in mixed environments. Prisma Cloud simplifies deployments with agent-based and agentless deployment options for all cloud-native applications, delivering full, customizable support for the OWASP Top 10.

• Secure web applications from top security risks:

  Cover SQL injection, cross-site scripting, code injection and more.

• Identify applications and APIs in any compute format:

  Automatically discover web-facing services and API risks to determine protection.

• Enforce application security on microservices locally:

  Automatically enforce WAAS at the service level to keep up with auto-scaling, ephemeral environments.

• Leverage full, customizable protection:

  Select which enforcement mechanism – alert, prevent or ban – to apply for each security scenario.

• Deploy agents as a part of your DevOps workflow:

  Use code-based deployment mechanisms to enable automatic deployment of protection with every code push.

• Take a unified approach to cloud-native security:

  Use a single, unified cloud security solution for superior protection compared to point products.

The internet is full of bots, but not all bots are malicious. Gain visibility into bot activity to allow known-good bots, such as search engine crawlers, to go through while other malicious bots are blocked.

• Allow and monitor known bots:

  Allow good bots such as search engine crawlers and news bots to crawl your applications, but monitor and block abusive behavior.

• Control unknown bots:

  Alert or block requests originating from bots with unknown intent, including headless browsers, command-line tools and good bot impersonators.

• Define custom bots:

  Create bot definitions for bots your team decides are known-good or malicious.

• Configurable for each application:

  Set application- or individual-service-level configurations for bot protection rules.