Prisma Cloud Compute

Palo Alto Prisma Cloud Compute is an advanced cloud workload protection and container security module within the Prisma Cloud platform, designed to secure virtual hosts, Docker containers, Kubernetes clusters, and serverless functions across multi-cloud environments. The solution delivers full-lifecycle defense by scanning container images and software artifacts during continuous integration builds, enforcing deployment gate policies in container registries, and providing active runtime defense and behavioral anomaly detection against unauthorized modifications and exploits in production clusters.

The platform deploys as a lightweight daemonset or agent across any public cloud, private data center, or managed Kubernetes service, including Amazon EKS, Azure AKS, Google GKE, and Red Hat OpenShift, while offering agentless vulnerability scanning options. It continuously correlates runtime telemetry with vulnerability feeds, CVE databases, and threat intelligence streams from Palo Alto Networks Unit 42. Prisma Cloud Compute monitors processes, file systems, and network connections across workloads, automatically blocking suspicious behaviors such as crypto-mining, privilege escalation, unauthorized shell spawning, and container breakout attempts.

Common organizational use cases include container image vulnerability scanning, runtime host and workload protection, Kubernetes compliance benchmarking, serverless function security, and microservice network segmentation. By embedding security controls directly into container workflows and runtime operating environments, Prisma Cloud Compute enables organizations to innovate quickly with modern cloud-native architectures while ensuring complete compliance and comprehensive protection against targeted workload compromises.