Agent Observability: Measuring Tools, Plans, and Outcomes AI agents have moved well beyond simple prompt-and-response interactions. In production environments today, they plan multi-step strategies, make branching decisions, invoke external tools via protocols like the Model Context Protocol (MCP), and loop through reasoning chains before produc...
An internal support agent with access to customer account records sits on a private subnet with no public DNS. Our AI red teaming platform cannot send it a single adversarial prompt. Neither can an attacker who is outside the network, which is why it was deployed there. Production is also the wrong place to test. Finding a jailbreak in a syste...
Cloud NGFW is a cloud-native Next-Generation Firewall fully managed by Palo Alto Networks. Starting August 2026, Palo Alto Networks customers can use Software NGFW (VM-Flex) credits to fund Cloud NGFW for AWS and Azure resources. This feature establishes a single, unified currency for both Software NGFW and Cloud NGFW services, offering unmatche...
Managing firewall resources across different deployment models should be flexible and straightforward. Customers using a combination of self-managed and Palo Alto Networks-managed Software NGFW products have traditionally had to manage separate credit models, adding complexity to purchasing and resource allocation. With Software NGFW Credits f...
AI has moved beyond pilots and proofs of concept. It now underpins critical applications across industries, from powering customer experiences to automating internal workflows. As AI becomes foundational to business operations, expectations around its reliability have shifted accordingly. The cost of downtime is no longer theoretical. Recent out...
Open WebUI is a widely adopted open-source platform for deploying self-hosted AI interfaces. For platform teams and IT administrators managing shared Open WebUI instances, however, a critical gap remains: while Open WebUI handles user-facing AI interactions effectively, it does not currently include the centralized operational and security co...
n8n handles workflow orchestration well in small-scale setups. The picture changes when AI Agent nodes begin calling LLMs across shared teams and environments. Token usage is hard to track, provider credentials are spread across configurations, and workflows depend on model endpoints without any policy layer governing what gets sent or returne...
In most organizations, model access has scaled faster than cost visibility. Teams know their total monthly spend but not which model, prompt, or workspace is responsible for it. This lack of granularity makes optimization reactive rather than strategic. AI cost observability bridges that gap. It brings clarity to the most opaque part of AI opera...
GitHub Copilot feels simple when a few developers use it. When entire engineering teams depend on it daily, and platform engineers are expected to explain who is using it, how requests are routed, and where usage appears across environments, operational complexity grows quickly. At this stage, Copilot becomes part of your shared AI infrastructur...
As adversaries deploy increasingly automated, machine-speed evasion tactics, traditional security models are hitting a critical bottleneck. Historically, network perimeters have relied on Layer 7 payload analysis, domain reputations, and URL filters to block threats. While highly effective at inspecting traditional traffic, these L7 controls hav...
If you manage branch locations, whether retail stores, clinics, bank branches, or kiosks, you know the pain. Every site requires a firewall, a router, and a switch. That's three separate devices to procure, deploy, configure, monitor, upgrade, and troubleshoot, multiplied across dozens or hundreds of locations. The result? Spiraling capital c...
Remote Browser Isolation Is Now Available for FedRAMP Moderate The mandate is clear. The browser is still the gap Executive Order 14028 told federal agencies to stop trusting the network perimeter and start verifying every session. OMB Memorandum M-22-09 turned that into a federal Zero Trust strategy, and agencies spent the years since re-ar...
This blog was written by Almas Raza As organizations strengthen account security with multifactor authentication, attackers are changing how they target users. Rather than always trying to steal passwords, they are increasingly abusing trusted OAuth authorization workflows to gain access to email, files and cloud applications. In these attacks...
Palo Alto Networks introduces the Prisma SD-WAN Enterprise Agreement (EA) to resolve the logistical burden and complexities of fragmented global renewals and high-volume SKU quoting. Read about our customer-focused features that are included in the EA and how it can provide a clear path for expansion with stabilized ramp-up costs. Say Hello to...
Author: Pranesh Neelakrishnan (@prneelakrish) , Principal Product Manager (Prisma Access) In today’s threat landscape, the "Patient Zero" problem–where a never-before-seen malicious file reaches an endpoint before a signature can be created–remains one of the most significant gaps in enterprise security. Traditional signature-based defenses oft...
