Host Security

Developer cloud accounts and ephemeral hosts makes visibility in the cloud more challenging. Prisma Cloud automates the discovery and protection of hosts in your cloud environment. Find and protect instances across your multi-cloud environments.

• Discover VMs running across clouds

  Find all running hosts with complete cloud metadata across your various cloud environments leveraging API-based discovery.

• Identify unmanaged virtual machines

  Get a quick view of your security coverage, identifying virtual machines without any agent protection across all of your clouds.

• Auto-protect hosts without manually installing agents

  Rule-based automated agent install protects unprotected hosts. Flexibly define scope by Accounts and Tags to enable protection for existing and future instances being spun up

• Secure hosts and containers with one installation

  Auto-protect hosts with an automatically installed agent that protects the host itself and all containers running on that node.

Improve your hygiene and reduce the risk of exposure in your cloud environments by identifying vulnerabilities continuously before and after deployment. Prisma Cloud finds, prioritizes and protects against vulnerabilities in real time from a centralized dashboard.

• Broader coverage and faster detection

  Get vulnerability detections across the full stack (OS, Applications and code) of your cloud servers in less than a few minutes. Eliminate blindspots with bespoke detections for unpackaged software.

• Automated risk prioritization

  Get a global view of vulnerability posture of your entire environment. Identify the vulnerability trend and the top vulnerabilities impacting your hosts. Automated prioritization of vulnerabilities with on risk score and risk factors based on CVSS, exploitable threats, and your applications’ configurations.

• Gain a consolidated view into risk across your stack from one agent and console

  View risks across your hosts, containers and serverless applications from one agent and console.

Virtual machines can be locked down to purpose-built use cases only. Prisma Cloud leverages runtime modeling for file integrity monitoring and to identify anomalies as well as protect against malicious applications.

• Automate threat protection

  Automatically profile secure runtime behavior and alert or block anomalous behavior, preventing attacks.

• Enjoy full virtual machine protection

  Integrated protection across running processes, file system use, host log inspection and custom runtime rules.

• Activate File Integrity Monitoring and Host Log Inspection

  Enforce FIM and log inspection, core requirements for both runtime protection and achieving compliance.

• Trace forensic events that led to an incident

  Gather forensic details in a timeline to identify the events that led to an incident and enable incident response.

• Create allow and block lists for fine-grained control

  Alert on or block behavior from Prisma Cloud’s list of malicious behavior, such as cryptominers, or add your own allow and block lists for processes, networking and file systems.