Palo Alto Networks adds Prisma AIRS runtime security to Google Cloud agents

The shift from chatbots to autonomous agents has changed the enterprise risk equation because agents can access tools, retain information and act without waiting for a human prompt. Traditional chatbot security largely concentrates on inspecting inputs and responses for prompt injection, data leakage or harmful content. Autonomous agents require broader oversight because they may call external services, manipulate enterprise resources or coordinate with other agents, so security controls must evaluate intent and behavior while activity is happening.

Palo Alto Networks is addressing that change through Prisma AIRS integrations designed to inspect agent activity within Google Cloud environments. The connection to Google Cloud's Agent Gateway, a component of the Gemini Enterprise Agent Platform, is intended to inspect tool calls as they pass between agents and external systems. Model Context Protocol connections present a two-way exposure: sensitive credentials can leave an enterprise through an agent request, while a compromised MCP server can return malicious links, malware or instructions embedded in tool descriptions. Runtime inspection therefore must assess the request, the response and the metadata surrounding the transaction.

Agent-based security is also extending into model governance. Palo Alto Networks has packaged its model-scanning service as an agent available through Google Cloud Marketplace, allowing other agents to request a policy verdict before continuing a workflow. The company says Prisma AIRS more than tripled its customer base within three months. The outcome hinges on whether the broader availability expected this fall delivers the promised expansion to user inputs and outputs, and on whether security teams can reconcile continuous activity from nonhuman identities as agent deployments grow.