Palo Alto Networks just launched two major AI security platforms: Cortex AgentiX for building and governing AI agents, and Prisma AIRS 2.0 for securing AI applications across their lifecycle. It’s a timely move—78% of organizations are deploying AI, but only 6% have proper security measures in place.
The Security Gap#
Think about that statistic for a moment. Most companies are racing to integrate AI agents into their workflows without adequate protection. Cortex AgentiX addresses this by providing a framework to deploy AI agents securely within enterprise environments, particularly in Security Operations Centers where vulnerabilities could be catastrophic.
The platform’s AI agents are trained on 1.2 billion security incident responses, which sounds impressive until you consider what happens when those agents make decisions autonomously. That’s why Palo Alto emphasizes a “human-in-the-loop” approach—keeping people in the decision chain rather than fully automating responses.
Defending AI Itself#
Prisma AIRS 2.0 tackles a different problem: securing the AI systems themselves. It offers real-time defense against prompt injections, tool misuse, and model poisoning—threats most organizations haven’t even started thinking about. The platform runs over 500 specialized attacks continuously to find vulnerabilities before attackers do.
The Real Question#
Here’s the interesting tension: we’re now using AI to secure AI. These platforms promise to protect organizations deploying AI agents at scale, but they also represent another layer of AI dependency. As CEO Nikesh Arora pointed out, preventing backend infrastructure attacks is critical when one breach could expose millions of customers.
The technology makes sense. The use case is clear. But we’re essentially trusting AI watchdogs to monitor AI workers—and hoping both layers stay reliable, transparent, and secure simultaneously. That’s a lot of faith in systems we’re still learning to understand.
Learn more: Visit Palo Alto Networks for details on Cortex AgentiX and Prisma AIRS 2.0.