Introducing Cortex Cloud

Bringing together best-in-class CDR with the next version of Prisma Cloud's leading CNAPP for real-time cloud security.

Data is an organization’s most important digital asset

Data is the focal point of security and compliance. But growing data volumes, increased regulation, and the shift toward AI make it difficult to effectively monitor and protect data in the cloud.

Visibility into sensitive data is limited

Cloud data is spread between multiple cloud providers and numerous datastores. Organizations struggle to understand which sensitive data they hold, who can access it, and where it’s exposed.

Prioritization is paramount

Security teams often become overwhelmed by the volume of misconfigurations and alerts that need their attention. Prioritizing threat vectors based on the risk they pose to sensitive data is key to efficiently allocating limited security resources.

Data protection and compliance require context

To mitigate data risk, organizations need to look beyond misconfigurations. Data lineage, exposure risk analysis, usage patterns, and data flow monitoring are essential to contextualizing and effectively responding to incidents.

Report: The State of Cloud Data Security in 2023

Discover, classify, protect, and govern data in cloud environments

Prisma® Cloud Data Security Posture Management (DSPM) empowers organizations to securely scale their data and AI infrastructure. Building on unique data discovery, classification, and monitoring capabilities, Prisma Cloud positions data at the center of Code to Cloud™ security.

  • Support for AWS, Azure, GCP, and Snowflake
  • Find shadow data and misconfigured datastores
  • Continuously monitor data at rest and in transit

Data discovery and classification
Data risk analysis
Data privacy and compliance
Data access governance
Data detection and response
Malware prevention


Our approach to Cloud Data Security

Data discovery and classification

Prisma Cloud automatically finds and contextualizes sensitive data. Eliminate data blind spots, find shadow data, and bolster your security and compliance posture with automated data classification. Prisma Cloud DSPM protects your datastores across the four major public cloud providers.

  • Comprehensive coverage

Find all sensitive or regulated data, regardless of where data resides.

  • Automated data classification
    Use 100+ pre-built classifiers to identify PII, financial information, health records, and compliance-related data.

  • Fast, agentless scanning and classification
    Prisma Cloud DSPM provides a full mapping of your sensitive data and risk in 24 hours, with no connectors required.

  • Sensitive data stays in your account
    Data is scanned and classified in your cloud account, ensuring data residency compliance.

Learn more

Data risk analysis

Misconfigured cloud resources can lead to data breaches and compliance violations. Prisma Cloud continuously monitors, identifies, and prioritizes vulnerabilities in cloud data resources.

  • Visibility into data at risk

Get visibility into your data in complex, multicloud environments.

  • Prebuilt and custom policies
    Use templates or define your own policies to find data flows and misconfigurations that put your organization at risk.

  • Unified policy engine
    Apply security policies wherever your data lives, based on a continuously updated threat model.

Learn more

Data privacy and compliance

Prisma Cloud DSPM helps strengthen privacy and compliance posture by understanding how sensitive data travels across cloud environments.

  • Identify sensitive data at rest, in use, and in motion

Monitor data flows between storage locations and environments.

  • Get notified when data falls out of compliance

See when specific data flows put you at risk of compliance violation.

  • Prevent data breaches and insider threats

Ensure that data stays in monitored storage and doesn’t leave your cloud account.

Learn more

Data access governance

Preventing unauthorized access to data is a core aspect of cybersecurity. Prisma Cloud DSPM gives you the tools to see who has access to your critical data assets.

  • Visual map of access holders
    Get a clear visual representation of your sensitive data and a mapping of identities and accounts with access permissions.

  • Notifications for high-priority data access risks
    Alerts for significant incidents like cross-account access to sensitive data.

  • Continuous data access monitoring
    Track all data interactions including changes to permissions across the data lifecycle.

Learn more

Data detection and response (DDR)

Prisma Cloud DSPM allows you to detect and respond to high-priority incidents in minutes by monitoring your environment.

  • Agentless, dynamic monitoring for cloud environments
    Prisma Cloud DSPM analyzes cloud logs to detect potentially damaging scenarios.

  • Alerts in near real-time
    Get notifications on matters that require immediate attention such as high-risk data movement.

  • Multiple integrations with your security stack
    Get alerts in your existing ticketing and messaging tools and integrate with SOAR and SIEM tools.

Learn more

Malware prevention

Prisma Cloud DSPM helps detect malware with automated discovery and scanning for files in cloud storage.

  • WildFire® integration
    Use the WildFire malware analysis engine to identify malware hidden in your stored data.

  • Compliance with malware scanning requirements
    Compliance frameworks may require the scanning of certain data for malware.

  • Integrated dashboard for malware and other data risk
    Use a single UI for comprehensive cloud data security.

Learn more

Prisma Cloud

Prisma® Cloud is the industry’s most complete Cloud Native Application Protection Platform (CNAPP), with the industry’s broadest security and compliance coverage throughout the development lifecycle across hybrid and multicloud environments.

Learn more