Recommended Free Tools
Palo Alto Networks completed its acquisition of AI-security company Protect AI on July 22, 2025. The company had announced a definitive agreement on April 28, 2025, alongside the launch of its Prisma AIRS AI-security platform. Protect AI’s model and application security capabilities are now part of Palo Alto’s effort to secure AI systems from development through runtime.
What Palo Alto Networks acquired
Protect AI focused on security risks in machine-learning models and AI applications—not conventional endpoint protection or a general-purpose firewall. Its work addressed vulnerabilities and malicious components in models, software dependencies, data, and deployment pipelines.
Palo Alto said the combined Prisma AIRS platform would cover model scanning and risk assessment, generative-AI runtime security, posture management, AI red teaming, and agent security. Its current AI Model Security materials say the product examines model architecture, weights, operators, and embedded code, and can integrate through APIs with build, test, and deployment workflows. Those are Palo Alto’s descriptions of its product capabilities, not independent efficacy findings.
Why the deal matters for AI security
The acquisition was aimed at “security for AI”: protecting the models, applications, data, and agents organizations build or use. That is different from “AI for security,” which means using AI to assist security operations, such as helping analysts investigate alerts.
#1 Best Overall
- Watchguard T145 Firebox with 1 Year Total Security Suite License (WGT145641) - The Firebox T145 delivers enterprise-grade protection for branch offices and retail sites. With a blend of 2.5Gb, 1Gb, and SFP/SFP+ ports, it supports high throughput, AI-driven malware protection, and DNS filtering for robust network defense.
- The Total Security Suite is WatchGuard’s most comprehensive security package, bundling every advanced service into one subscription. It delivers layered defense with AI-driven malware detection, DNS filtering, cloud sandboxing, and security correlation. Ideal for organizations that demand maximum protection and visibility across their network.
- The Total Security Suite equips your WatchGuard Firebox with the full set of advanced defenses. It adds AI powered malware detection, DNS filtering, cloud sandboxing, threat correlation, and automated response, all managed in WatchGuard Cloud. Ideal for organizations that need maximum protection, compliance ready reporting, and end to end visibility.
- Interfaces and deployment: 2.5Gb and 1Gb Ethernet with SFP or SFP+ fiber for clean aggregation and segmented backhaul at the edge.
- Performance and scale: UTM up to 710 Mbps with inspection on; flexible VPN topologies for hub and spoke or mesh designs.
AI systems create risks that traditional controls may not address on their own. A prompt injection may try to manipulate a model or agent; poisoned data or altered model components may affect behavior; third-party models, packages, APIs, and datasets can add supply-chain exposure. After deployment, jailbreaks, sensitive-data leakage, runtime abuse, and improper tool use can also create risk. Palo Alto presented Protect AI as a way to broaden its coverage of these issues, not as a guarantee that they can be eliminated.
How Prisma AIRS is meant to work
Palo Alto introduced Prisma AIRS on the same day it announced the Protect AI agreement. The company’s initial framework grouped its intended capabilities into three functions:
Rank #2
- Watchguard T145 Firebox with 3 Year Total Security Suite License (WGT145643) - The Firebox T145 delivers enterprise-grade protection for branch offices and retail sites. With a blend of 2.5Gb, 1Gb, and SFP/SFP+ ports, it supports high throughput, AI-driven malware protection, and DNS filtering for robust network defense.
- The Total Security Suite is WatchGuard’s most comprehensive security package, bundling every advanced service into one subscription. It delivers layered defense with AI-driven malware detection, DNS filtering, cloud sandboxing, and security correlation. Ideal for organizations that demand maximum protection and visibility across their network.
- The Total Security Suite equips your WatchGuard Firebox with the full set of advanced defenses. It adds AI powered malware detection, DNS filtering, cloud sandboxing, threat correlation, and automated response, all managed in WatchGuard Cloud. Ideal for organizations that need maximum protection, compliance ready reporting, and end to end visibility.
- Interfaces and deployment: 2.5Gb and 1Gb Ethernet with SFP or SFP+ fiber for clean aggregation and segmented backhaul at the edge.
- Performance and scale: UTM up to 710 Mbps with inspection on; flexible VPN topologies for hub and spoke or mesh designs.
- Discover: Identify AI assets and activity across an organization.
- Assess: Evaluate risks in models, applications, and AI-related configurations.
- Protect: Apply security controls to AI systems, including at runtime.
The intended scope spans models, AI applications, agents, and related data across development, testing, deployment, and runtime. In practice, scanning a model before deployment and monitoring live interactions address different parts of the problem: predeployment checks cannot catch every issue arising from changing prompts, user behavior, tool calls, or runtime conditions.
Deal timeline and purchase price
| Milestone | What happened |
|---|---|
| April 28, 2025 | Palo Alto announced a definitive acquisition agreement and introduced Prisma AIRS. The proposed transaction was subject to customary closing conditions and regulatory approvals. Palo Alto announcement |
| July 22, 2025 | Palo Alto announced that the acquisition had closed. Protect AI CEO Ian Swanson became vice president of product for Prisma AIRS. Closing announcement |
| October 28, 2025 | Palo Alto announced Prisma AIRS 2.0 and said the release completed the native integration of Protect AI. Prisma AIRS 2.0 announcement |
| March 23, 2026 | Palo Alto announced Prisma AIRS 3.0, positioning it around discovering, assessing, and protecting agentic AI. Prisma AIRS 3.0 announcement |
Palo Alto did not disclose the purchase price in the cited official announcements. Network World reported that Jefferies analysts estimated a value of approximately $650 million to $700 million; that is an attributed estimate, not a confirmed transaction price. Network World report
Rank #3
- Watchguard T125 Firebox with 3 Year Total Security Suite License (WGT125643) - The Firebox T125 provides enterprise-grade protection for branch offices and remote sites. Featuring 2.5Gb and 1Gb ports, it delivers fast throughput, advanced malware detection with IntelligentAV, and SD-WAN compatibility in a compact form factor.
- The Total Security Suite is WatchGuard’s most comprehensive security package, bundling every advanced service into one subscription. It delivers layered defense with AI-driven malware detection, DNS filtering, cloud sandboxing, and security correlation. Ideal for organizations that demand maximum protection and visibility across their network.
- The Total Security Suite equips your WatchGuard Firebox with the full set of advanced defenses. It adds AI powered malware detection, DNS filtering, cloud sandboxing, threat correlation, and automated response, all managed in WatchGuard Cloud. Ideal for organizations that need maximum protection, compliance ready reporting, and end to end visibility.
- Interfaces and deployment: 1x 2.5Gb and 4x 1Gb Ethernet to simplify uplinks, carve out segmented zones, and keep branch wiring minimal.
- Performance and scale: UTM up to 510 Mbps with inspection on; sized for small and branch offices with room to grow VPN connectivity.
What changed after the acquisition
The deal is no longer pending: Palo Alto owns Protect AI, and the company says its technology was natively integrated into Prisma AIRS 2.0. The subsequent Prisma AIRS 3.0 announcement indicates that Palo Alto is continuing to develop the platform, with a stronger focus on agentic AI—systems that can use tools and take actions, not just generate text.
That product evolution matters because agents can have permissions, memory, access to APIs, and the ability to act. Screening prompts alone is not enough to govern those capabilities. Buyers should also examine identity and authorization, secrets handling, tool restrictions, auditability, isolation, and recovery options.
Rank #4
What enterprise buyers should evaluate
The acquisition strengthens Palo Alto’s platform strategy, but does not establish that Prisma AIRS is the right choice for every organization. Before evaluating it, define the specific controls and environments the organization needs.
- Required coverage: Decide whether the priority is model scanning, runtime protection, red teaming, agent security, posture management, or a combination.
- Technical fit: Verify support for the organization’s model formats, frameworks, registries, orchestration systems, AI gateways, and cloud or on-premises environments.
- Workflow integration: Check compatibility with CI/CD, MLOps, SOC, ticketing, SIEM, and data-loss-prevention tools, and whether developers receive actionable findings without every issue being routed through security staff.
- Operational behavior: Ask how the product handles false positives, latency, policy exceptions, and changes to models or agent tools. A runtime rule that blocks legitimate work can create pressure to weaken or bypass controls.
- Data and audit: Determine what prompts, outputs, or other information the product processes, what leaves the customer environment, how it is retained, and what evidence is available for audits and incident response.
- Commercial fit: Confirm which capabilities are included in the relevant subscription, whether separate modules are required, and whether the deployment depends on other Palo Alto products. Public list pricing was not identified in the cited materials; request a current quote rather than relying on an assumed price.
Platform consolidation may reduce the number of vendors and integrations an organization manages, but it can also deepen dependence on one vendor’s licensing, ecosystem, and roadmap. A broad platform is not necessarily as deep as a specialist tool in every AI-security category, so compare it against the actual workload and controls required.
Best Value
- Watchguard T145 Firebox with 5 Year Total Security Suite License (WGT145645) - The Firebox T145 delivers enterprise-grade protection for branch offices and retail sites. With a blend of 2.5Gb, 1Gb, and SFP/SFP+ ports, it supports high throughput, AI-driven malware protection, and DNS filtering for robust network defense.
- The Total Security Suite is WatchGuard’s most comprehensive security package, bundling every advanced service into one subscription. It delivers layered defense with AI-driven malware detection, DNS filtering, cloud sandboxing, and security correlation. Ideal for organizations that demand maximum protection and visibility across their network.
- The Total Security Suite equips your WatchGuard Firebox with the full set of advanced defenses. It adds AI powered malware detection, DNS filtering, cloud sandboxing, threat correlation, and automated response, all managed in WatchGuard Cloud. Ideal for organizations that need maximum protection, compliance ready reporting, and end to end visibility.
- Interfaces and deployment: 2.5Gb and 1Gb Ethernet with SFP or SFP+ fiber for clean aggregation and segmented backhaul at the edge.
- Performance and scale: UTM up to 710 Mbps with inspection on; flexible VPN topologies for hub and spoke or mesh designs.
When to consider alternatives
Prisma AIRS may merit an evaluation for enterprises deploying multiple models, AI applications, or agents that want lifecycle coverage—particularly if they already use Palo Alto security products. It may be less suitable when the need is limited to one narrow control, when a company wants a specialist or vendor-neutral tool, or when required integrations and deployment conditions do not fit.
Other products occupy different positions in the market. HiddenLayer presents itself as an AI-security specialist; Lakera focuses on AI application and runtime protection; Cisco AI Defense may be relevant to Cisco-centered environments; and Microsoft Security is worth considering where Microsoft and Azure are already central. These links identify vendor offerings, not a comparative assessment of their effectiveness. Evaluate them against the same requirements for scanning, runtime enforcement, agent controls, integrations, data handling, deployment, and total contract cost.
What the acquisition does—and does not—establish
The transaction gave Palo Alto a dedicated AI/ML-security capability to integrate into Prisma AIRS, and the company has since described that integration and expanded the platform toward agentic AI. It does not, by itself, prove security effectiveness, customer satisfaction, market leadership, or that every feature is included in a single license. The practical question for buyers is whether the specific controls, integrations, and operating model fit their environment.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
