🛡️ Palo Alto Networks · Prisma AIRS

Secure AI Apps with
AI Runtime Security

Walk through 6 interactive demos showing how Prisma AIRS protects AI applications — from prompt injection to data loss prevention.

1
Architecture
2
Prompt Injection
3
Jailbreak
4
PII & DLP
5
API Guardrails
6
Dashboard
Step 1 of 6
How Prisma AIRS Works

Every request to your AI app flows through the AIRS AI Gateway — a transparent security layer that inspects, classifies, and enforces policies on both prompts and responses in real time.

🧑‍💻 AI App
User / Client
→
🛡️ AIRS Gateway
Inspect & Enforce
→
⚙️ Guardrails
Policy Engine
→
🤖 LLM
OpenAI / Claude / etc.
1
Intercept — Gateway intercepts every request before it reaches the LLM
2
Analyze — ML models scan for injection, toxicity, PII, jailbreaks, and malicious URLs
3
Enforce Policy — Block, redact, or annotate based on your configured security profile
4
Inspect Response — LLM response also scanned for sensitive output or harmful content
5
Log & Alert — All events are logged to SIEM/SOAR with full audit trail
Step 2 of 6
Prompt Injection Detection

Attackers embed adversarial instructions inside user input to hijack the AI model's behavior. AIRS detects and blocks these attacks in real time — before they reach the LLM.

🧪 Try an Attack

Click a sample prompt or type your own, then hit Send.

Ignore instructions System prompt leak Role override Safe query
🚨
📊 Real-time Analysis

Send a prompt to see analysis.

Step 3 of 6
Jailbreak & Policy Bypass

Users attempt to trick models into ignoring safety guidelines using roleplay, hypotheticals, or encoding tricks. AIRS uses behavioral pattern matching to catch these attempts.

🔓 Jailbreak Attempts

Simulate common jailbreak techniques:

DAN prompt Hypothetical framing Base64 encoding Roleplay override Toxic content Benign request
⚠️
🔬 Detection Engine Output
Click a technique to simulate detection…
⚙️ Jailbreak Policy Configuration
Detection CategoryStatusSensitivityAction
DAN / Jailbreak PromptsEnabledStrictBlock + Alert
Roleplay OverridesEnabledStrictBlock + Alert
Hypothetical FramingEnabledModerateWarn + Log
Encoding ObfuscationEnabledStrictBlock + Alert
Toxic / Harmful ContentEnabledStrictBlock + Alert
Step 4 of 6
PII Detection & Data Loss Prevention

AIRS scans both incoming prompts and outgoing responses for sensitive data — SSNs, credit cards, emails, API keys, and more — then redacts or blocks before data leaves your environment.

🔍 Input Scanner

Paste text with sensitive data and watch it get redacted:

SSN + CC Email + Phone API Keys Medical PHI
🎭 Redacted Output
Redacted text will appear here…
🗂️ DLP Policy — Detected Entity Types
Step 5 of 6
API Security Guardrails

Configure fine-grained security policies for your AI API endpoints — rate limiting, model access control, topic restrictions, and response filtering — all without changing application code.

🔧 Input Guardrails
📤 Output Guardrails
📋 Active Policy Status
📡 Simulate API Request

Build a request and see how AIRS guardrails respond:

🛡️ Gateway Response
Response will appear here…
💻 Python SDK Integration
import openai

# Point your existing OpenAI client at the AIRS Gateway
client = openai.OpenAI(
  api_key="your-openai-api-key",
  base_url="https://airs-gateway.prismacloud.io/v1",
  default_headers={
    "X-AIRS-Profile": "production-strict",
    "X-AIRS-App-ID": "my-ai-app-001",
  }
)

# All requests automatically protected — no code changes needed
response = client.chat.completions.create(
  model="gpt-4",
  messages=[{"role": "user", "content": user_input}]
)

# AIRS raises AIRSBlockedException for blocked requests
from airs_sdk import AIRSBlockedException
try:
  result = client.chat.completions.create(...)
except AIRSBlockedException as e:
  print(f"Blocked: {e.reason} | Threat: {e.threat_category}")
Step 6 of 6
Security Dashboard & Observability

Get full visibility into AI traffic patterns, threat detections, and policy enforcement — all in one unified security dashboard.

0
Requests Today
↑ 12% vs yesterday
0
Threats Blocked
↑ 3 new threats
0
PII Redacted
↓ 8% lower risk
0ms
Avg Gateway Latency
↓ Well below SLA
📈 Threat Breakdown
Prompt Injection
0%
Jailbreak Attempt
0%
PII Detected
0%
Toxic Content
0%
Safe Requests
0%
📋 Recent Threat Events
Events will stream in…
🔗 SIEM Integration — Event Schema
{
  "event_id": "airs-evt-8f3a2c",
  "timestamp": "2026-10-12T09:14:22Z",
  "app_id": "my-ai-app-001",
  "action": "BLOCKED",
  "threat_category": "prompt_injection",
  "confidence": 0.97,
  "user_id": "usr_anon_4821",
  "prompt_hash": "sha256:a3f9...",
  "policy_profile": "production-strict"
}
🛡️

Demo Complete!

You've seen how Prisma AIRS secures AI applications at every layer — from the prompt to the response — without changing your existing code.

🔍
Prompt Injection
🔓
Jailbreak Detection
🎭
PII Redaction
🛑
DLP Enforcement
⚙️
API Guardrails
📊
Security Dashboard