Protect AI
https://www.paloaltonetworks.com/ai-security/prisma-airs
Founded 2022 by Ian Swanson + Daryan Dehghanpisheh (ex-AWS); AI/ML supply-chain + GenAI security. Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); its capabilities now ship in Prisma AIRS. Products: Recon (red-team), ModelScan (model artifact scanner), Sightline (vulnerability DB).
Acquired · Verified 2026-10-29 · fresh as of 2026-10-29 · 16 cited facts, 0 with a third-party source · 2 recorded changes · Suggest a correction
At a glance
- Tier
- T2
- Created
- 2022 (founded) vendor fix
- Latest release
- not applicable — wrong section fix
- License
- not applicable — not OSS fix
- GitHub
- not applicable — no GitHub repo fix
- Pricing
- not applicable — wrong section fix
- Funding
- Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); prior $60M Series B Aug-2024 (Evolution Equity; $400M val) vendor fix
- Freshness
- 2026-10-29 fix
- Layer
- agent-infra repo fix
- Licensing
- commercial vendor fix
When to use
Optimised for: AI/ML supply-chain + GenAI security for enterprise + gov
Anti-fit: not applicable — wrong section
Pros & cons
Pros
Largest pure-play AI-security exit to date; comprehensive ML supply-chain + GenAI; Palo Alto distribution post-2025.
Cons
Post-acquisition integration uncertainty; product roadmap subject to Palo Alto unified-platform direction.
Claims & capabilities
$60M Series B Aug-2024 ($400M val; Evolution Equity); **$700M acquisition by Palo Alto Networks Apr-2025** — one of largest AI-security exits to date
Technical surface
- API surface
- not applicable — wrong section
- Backend storage
- not applicable — wrong section
- Deployment
- not applicable — wrong section
- Embedding model
- not applicable — not a memory product
- Multi-tenancy
- not applicable — wrong section
- MCP
- not applicable — wrong section
- A2A
- not applicable — wrong section
- OpenTelemetry
- not applicable — wrong section
Alternatives to Protect AI → live options ranked by shared design, licence, hosting and MCP support
Similar systems
Other use-case-specific agent harnesses in the catalog, ranked by inbound references.
- Calypso AI (now F5 AI Guardrails) T2
Dublin / NYC founded 2018; GenAI security and content scanning. $23M Series A-1 Aug-2024 (Paladin Capital + Lockheed Martin Ventures). Pivoted from defence ML to enterprise GenAI guardrails 2023-24.
- Salesforce Agentforce T1
Cross-listing: Salesforce Agentforce already exists under Vertical / Customer-support / voice memory; this row is the Agent-harness framing — Agentforce as the consumer-facing agent IDE / builder on Data Cloud. Agentforce launched Sep-2024; Agentforce 2.0 announced Dec-2024.
- Lasso Security T2
Tel-Aviv-founded LLM security platform — adversarial testing, prompt-injection defence, data-leakage prevention. $6M seed Nov-2023 (Entrée Capital + Samsung Next).
- Pillar Security T2
Tel-Aviv-founded (Dor Sarig + Ziv Karliner, both ex-IDF cyber); end-to-end LLM security platform — discovery, red-teaming, runtime guardrails. $9M seed Apr-2024 (Shield Capital + Greenfield).
- Promptfoo T2
OSS (MIT) prompt-engineering eval and red-team CLI; supports OWASP LLM Top-10 vulnerability tests, jailbreak generation, and CI/CD pipeline integration. $5M seed Mar-2024 (Andreessen Horowitz). Founders ex-Discord + ex-Smile Identity.
- Garak T3
OSS (Apache 2.0) LLM vulnerability scanner — 'nmap for LLMs.' Originally Leon Derczynski (Univ Sheffield / ITU Copenhagen); NVIDIA now stewards the project. Tests for jailbreaks, prompt injection, hallucination, data leakage. Apache-2.0.
Sources (15 cited facts, 0 third-party)
Each fact links to the page it came from; the badge says who published it (how to read sources).
- What it is AI/ML model security platform (acquired by Palo Alto Networks 2025) vendor
- What it does & what's distinct Founded 2022 by Ian Swanson + Daryan Dehghanpisheh (ex-AWS); AI/ML supply-chain + GenAI … vendor
- Claims / benefits $60M Series B Aug-2024 ($400M val; Evolution Equity); **$700M acquisition by Palo Alto N… vendor
- Created 2022 (founded) vendor
- Funding Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); prior $… vendor
- Customers / scale Mastercard, US Air Force, Disney, financial / gov vendor
- Compliance SOC 2 Type II vendor
- HQ Seattle vendor
- Founders / pedigree Ian Swanson (CEO; ex-AWS); Daryan Dehghanpisheh (President; ex-AWS) vendor
- Optimised for AI/ML supply-chain + GenAI security for enterprise + gov vendor
- Pros Largest pure-play AI-security exit to date; comprehensive ML supply-chain + GenAI; Palo … vendor
- Cons Post-acquisition integration uncertainty; product roadmap subject to Palo Alto unified-p… vendor
- Project & sources protectai.com/ vendor
- licensing-bucket commercial vendor
- taxonomy-three-layer-rollup agent-infra repo
What changed
Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)
- 2026-10-29
- Funding / ownership “$60M Series B Aug-2024 (Evolution Equity; $400M val) → Palo Alto Networks acq $700M Apr-2025” → “Acquired by Palo Alto Networks (2025-07-22; announced Apr-2025, reported $700M); prior $60M Series B Aug-2024 (Evolution Equity; $400M val)” source
- 2026-10-28
- Homepage “https://protectai.com/” → “https://www.paloaltonetworks.com/ai-security/prisma-airs”
Related systems
Referenced by (2)
- LiteLLM integrates with — LiteLLM proxy docs have a Palo Alto Networks Prisma AIRS guardrail integration page. (verified 2026-10-29)
- Portkey AI integrates with — Portkey docs have a Palo Alto Networks Prisma AIRS guardrails integration page. (verified 2026-10-29)