The cybersecurity giant unveiled the next version of its SIEM replacement offering with the debut of Cortex XSIAM 3.0, as well as updates to Prisma SASE and AI security and a planned startup acquisition.
Palo Alto Networks unveiled major enhancements Monday to two of its key product areas with updates to Cortex XSIAM and Prisma SASE, along with the launch of a new AI security platform and a planned startup acquisition in the segment.
XSIAM (extended security intelligence and automation management) aims to offer an AI-powered alternative to traditional SIEM (security information and event management) and is “one of the fastest-growing products in cybersecurity,” Palo Alto Networks CEO Nikesh Arora said during a quarterly call in February.
[Related: Palo Alto Networks Channel Chief On Why AI, Platformization Go Hand-In-Hand]
The cybersecurity giant announced the next version of the platform with the debut of Cortex XSIAM 3.0 as the RSA Conference 2025 got underway Monday.
Palo Alto Networks also announced major updates to its secure access service edge platform, Prisma SASE, in connection with RSAC 2025. The Prisma SASE enhancements include the debut of the next version of the company’s secure enterprise browser, with the launch of the Prisma Access Browser 2.0.
Meanwhile, Palo Alto Networks debuted its new AI security platform, Prisma AIRS, and announced its intention to acquire AI security startup Protect AI.
What follows are the details on major Palo Alto Networks launches in XSIAM, SASE and AI security.
Cortex Advanced Email Security
Major updates in Cortex XSIAM 3.0 include the introduction of “advanced” email security, with capabilities for detecting sophisticated phishing and other email-based threats — including those enhanced using LLMs. The detection leverages LLM-driven analytics that can “continuously learn from emerging threats,” Palo Alto Networks said.
The email security capabilities also provide automated removal of malicious emails and disabling of compromised accounts, as well as isolation of affected endpoints, the company said.
Additionally, Cortex Advanced Email Security enables detection and response with “complete email context” through correlation of data from email, endpoint, identity and cloud sources, according to Palo Alto Networks.
Cortex Exposure Management
Other key introductions for XSIAM 3.0 announced by Palo Alto Networks include Cortex Exposure Management, which can “cut vulnerability noise by up to 99 percent” using enhanced prioritization along with automated remediation, the company said.
Key capabilities include discovery of risks across network and cloud environments as well as endpoints and third-party sources, according to the vendor.
Crucially, the tool deploys AI to “prioritize high-risk, exploitable vulnerabilities with no compensating controls, eliminating false alarms,” Palo Alto Networks said in a news release.
Prisma SASE Updates
With the second-generation version of Palo Alto Networks’ Prisma Access Browser, the vendor says the secure enterprise browser now provides “real-time” visibility and access control for GenAI usage to ensure protection of sensitive data.
Prisma Access Browser 2.0 also adds new, real-time protections against “evasive and targeted attacks such as AI-generated cloaking and SaaS-hosted phishing attacks,” the company said.
Other newly added features for Prisma SASE include capabilities in endpoint data loss prevention — including improvements in discovery of “shadow” data — and app acceleration with expanded support for productivity apps.
Prisma AIRS
Palo Alto Networks on Monday debuted its new AI security platform, Prisma AIRS, with capabilities that include AI model scanning for vulnerabilities, with the aim of enabling safe adoption of AI models.
Other key capabilities in Prisma AIRS include posture management, AI red teaming and runtime security, the company said.
Meanwhile, Palo Alto Networks said that Prisma AIRS will offer security for AI agents, including agents created using no-code/low-code methods. The capabilities will protect against threats to AI agents that include impersonation of identities and manipulation of memory as well as tool misuse, the company said.
Protect AI Acquisition Deal
Palo Alto Networks announced Monday that it plans to acquire Protect AI, a startup focused on AI security. Terms of the deal were not disclosed.
Protect AI brings a focus on AI-SPM (AI Security Posture Management) that aims to provide greater visibility, management and security for AI/ML environments, as well as providing remediation and governance capabilities.
In a news release, Palo Alto Networks said that Protect AI has “already established itself as an important player in this increasingly critical new area of security.”
The planned acquisition will enable the company to “more quickly and comprehensively accelerate its vision for Prisma AIRS,” Palo Alto Networks said.
