Prisma AIRS Integrations

Integration guides for Palo Alto Networks Prisma AIRS (AI Runtime Security) with third-party platforms.

Overview

Prisma AIRS provides inline security for AI applications, scanning prompts, responses, and tool interactions in real-time. It detects threats like prompt injection, sensitive data exposure, malicious URLs, and toxic content before they impact your AI workflows.

For detection categories and use cases, see the Prisma AIRS documentation.

This repository contains setup guides for embedding Prisma AIRS security into AI gateways, LLM proxies, coding assistants, and automation platforms.

Integration Support Matrix

Integration	Category	Prompt	Response	Streaming	Pre-tool	Post-tool
Anthropic (Hooks)	AI Coding Assistant	✅	❌	❌	✅	✅
Anthropic (MCP)	AI Coding Assistant	✅	✅	❌	❌	❌
Anthropic (Skill)	AI Coding Assistant	✅	✅	❌	❌	❌
Cline	AI Coding Assistant	✅	❌	❌	✅	✅
Cursor	AI Coding Assistant	✅	✅	❌	✅	✅
Windsurf	AI Coding Assistant	✅	❌	❌	✅	⚠️
Microsoft (Azure APIM)	API Gateway	✅	✅	❌	❌	❌
Google (Apigee)	API Gateway	✅	✅	❌	❌	❌
Kong (Custom Plugin)	API Gateway	✅	✅	❌	❌	❌
Kong (Request Callout)	API Gateway	✅	❌	❌	❌	❌
LiteLLM	AI Gateway	✅	✅	⚠️	❌	❌
n8n	Workflow Automation	✅	✅	❌	❌	❌
Portkey	AI Gateway	✅	✅	❌	❌	❌
TrueFoundry	AI Gateway	✅	✅	⚠️	❌	❌
GitHub (Actions)	CI/CD Pipeline	N/A	N/A	N/A	N/A	N/A
Jenkins (Pipeline)	CI/CD Pipeline	N/A	N/A	N/A	N/A	N/A

Legend: ✅ Full support | ⚠️ Partial support | ❌ Not supported

N/A — GitHub Actions uses Prisma AIRS Model Security (pre-deployment model file scanning), not AI Runtime Security. See the integration README for model scanning coverage.

N/A — Jenkins uses Prisma AIRS Model Security (pre-deployment model file scanning), not AI Runtime Security. See the integration README for model scanning coverage.

---

Key Concepts

• AI Runtime Security (AIRS): Inline security that scans AI traffic in real-time, detecting prompt injection, data leakage, malicious code, and policy violations.
• Strata Cloud Manager: Management interface for configuring Prisma AIRS security profiles and generating API keys.
• Security Profile: Configuration that defines detection rules and actions (block, allow, alert) for scanned content.
• Guardrail: Security control in a partner platform that invokes Prisma AIRS to scan and validate AI requests/responses.

Resources

• Prisma AIRS Developer Documentation
• Prisma AIRS Administrator Guide