Host Security

Improve your hygiene and reduce the risk of exposure in your cloud environments by identifying vulnerabilities continuously before and after deployment. Prisma Cloud finds, prioritizes and protects against vulnerabilities in real time from a centralized dashboard.

• Build golden pipelines by identifying vulnerable machine images.

  Scan VM images prior to deployment to alert on or block vulnerabilities from being deployed.

• Rank vulnerabilities by risk for prioritization.

  Prioritize vulnerabilities based on risk score and risk factors based on your applications’ configurations.

• Gain a real-time view into vulnerabilities.

  Scan running hosts continuously, with minimal increased load against the latest vulnerability databases.

• Gain a consolidated view into risk across your stack from a single pane of glass.

  View risks across your hosts, containers and serverless applications from one unified console with flexible deployments (agents and agentless).

• Protect against unpatched vulnerabilities.

  Leveraging our WAAS module, you can block attempted exploits of vulnerabilities prior to patching the operating system.

Virtual machines can be locked down to purpose-built use cases only. Prisma Cloud leverages runtime modeling for file integrity monitoring and to identify anomalies as well as protect against malicious applications.

• Automate threat protection.

  Automatically profile secure runtime behavior and alert or block anomalous behavior, preventing attacks.

• Enjoy full virtual machine protection.

  Integrated protection across running processes, file system use, host log inspection and custom runtime rules.

• Activate File Integrity Monitoring (FIM) and Host Log Inspection:

  Enforce FIM, log inspection and core requirements for both runtime protection and achieving compliance.

• Trace forensic events that led to an incident.

  Gather forensic details in a timeline to identify the events that led to an incident and enable incident response.

• Create allow and block lists for fine-grained control.

  Alert on or block behavior from Prisma Cloud’s list of malicious behavior, such as cryptominers, or add your own allow and block lists for processes, networking and file systems.

Developer cloud accounts and ephemeral hosts makes visibility in the cloud more challenging. Prisma Cloud automates the discovery and protection of hosts in your cloud environment. Find and protect instances across your multicloud environments.

• Discover VMs running across clouds.

  Find all running hosts across your various cloud environments leveraging API-based discovery.

• Identify unmanaged virtual machines.

  Scan cloud accounts for virtual machines running without any agent protection.

• Protect hosts with flexible deployment options.

  Automatically uncover threats with flexible deployment options via agents and agentless options in your environments.

• Secure hosts and container runtime.

  Auto-protect hosts with an automatically installed agent that protects the host itself and all containers running on that node.