Palo Alto Networks Prisma Cloud

Name: Palo Alto Networks Prisma Cloud
Brand: Palo Alto Networks
Rating: 4.4 (353 reviews)

Leader

The industry's most comprehensive AI security platform.

Est 2005|Valuation $306.8B|Raised $261.3M|1 Ref Customers

LinkedIn 2.0M|Website|Web traffic 3.9M|FTEs 21,921|HQ Santa Clara, CA

MarketsVulnerability Management Cloud-Native Application Protection Platform (CNAPP)IaC Security

Platform CoversApplication Security Testing (AST)

Palo Alto Networks Prisma Cloud screenshot

Published Oct 15, 2026

01Common complaints

- Company sizes or stages where this product may be inappropriate - Early-stage startups and small teams (for example, fewer than 100–200 employees) may find the operational and cost overhead disproportionate if only basic posture capabilities are required. - Industries or use cases where competitors may be preferable - Organizations prioritizing rapid, agentless visibility and easy prioritization with minimal rollout effort may prefer agentless-first tools such as Wiz or Orca. - Technical requirements that the product may not meet - Teams that require fully self-serve trials across all modules without sales involvement may encounter limitations in trial availability for all modules. - Budget constraints that make alternatives more appropriate - For budget-constrained buyers, native cloud security offerings (e.g., Defender for Cloud, Security Hub) can be more economical initially, particularly in single-cloud contexts. - Specific workflows or integrations where the product struggles - Teams with very limited capacity for tuning or that cannot tolerate high alert volumes may find the operational model challenging. - Red flags in the buying process - Enterprise quote-based pricing and credit-based licensing can complicate procurement and cost predictability; buyers should plan for detailed scoping. - Current limitations acknowledged by the vendor - No consolidated public "known issues" list was captured in the sources accessed for this research snapshot. - Features on the roadmap (not yet available) - No reliable public roadmap with dated milestones was identified in the sources accessed. - Scale limitations (at what volume/size does it break down?) - No explicit scale thresholds were documented in the sources reviewed. Anecdotal commentary references performance perceptions that vary by environment. - Security or compliance gaps - For commercial Prisma Cloud SaaS, a consolidated public page enumerating certifications (SOC 2/ISO) was not found in the sources reviewed; buyers should request formal compliance artifacts under NDA. - Technical debt or architectural limitations mentioned in reviews - Community narratives suggest platform complexity and backend maturity concerns in some accounts; these are anecdotal and should be validated during technical evaluation. - API limitations or integration constraints - Prisma Cloud exposes APIs; detailed evaluation of API breadth and rate limits should be performed during technical proof-of-concept testing.

Why some customers left for competitors (churn reasons)

Slower time-to-value due to deployment complexity and agent requirements.
Alert fatigue and the operational burden of tuning.
Preference among some teams for agentless-first usability and prioritized risk-context approaches offered by competitors such as Wiz and Orca.

02Why they buy

- Competitive advantages supported by customer feedback - Multi-cloud visibility and governance capabilities are frequently cited as strengths in reviews and user comments. - The platform provides broad coverage across posture, workload protection, code scanning, and identity risk within a single vendor offering. - Notable differentiators - The government-focused offering and associated compliance positioning (e.g., FedRAMP High for specific deployments) is a differentiator for federal workloads when validated. - Differentiation from competitors based on reviews - Reviews tend to characterize Prisma Cloud as having a broad feature set; however, some reviewers indicate it requires more operational effort than agentless-first challengers. - Evidence from case studies - Vendor-published materials claim outcomes such as faster patching and reduced overhead; these should be validated with detailed methodologies and comparable environment data. - Areas where competitors have advantages - Some competitors provide faster time-to-value and clearer prioritization approaches; specialized AppSec tools may provide deeper developer-centric features in some workflows.

Why customers chose this product over alternatives (as suggested by reviews)

Desire for a single platform that covers posture, runtime, identity, and code security to reduce tool sprawl.
Multi-cloud support and extensive compliance mapping.
Existing vendor relationships and enterprise licensing agreements.

03Field reports

Gartner Peer Insights (observations)

- Full review content on some platforms may be restricted; excerpts and summaries indicate mixed sentiment, including both favorable and critical feedback. - Representative favorable feedback - Reviewers report that Prisma Cloud provides visibility into cloud assets and identifies security risks related to misconfigurations. - Some reviewers note the product delivers broad cloud security coverage across posture and workload protection areas. - Representative critical feedback - Some reviewers reported delays in issue resolution and inconsistent support experiences. - Comments include difficulty implementing and maintaining the platform and reports of frequent false positives.

TrustRadius

TrustRadius lists a set of reviews with distribution across industries such as professional services, information, and finance/insurance. The sample captured in the review crawl was smaller relative to some mass-market tools.

Community perspectives (Reddit, other forums)

- Common positive themes - Multi-cloud coverage and breadth: users often note that Prisma Cloud covers a wide range of cloud security functions. - Asset tracking and visibility are frequently cited as useful capabilities. - Common negative themes - False positives and alert fatigue: numerous community posts and threads reference substantial tuning effort required to reduce false positives. - Operational complexity: users report challenges when deploying multiple modules or attempting to evaluate all modules in self-service trials. - Questions about comparative value versus native cloud provider controls: some community discussions weigh the incremental benefit versus provider-native tooling. - Tone and limitations - Community posts are anecdotal and vary by contributor; they should be weighted accordingly.

Specific outcomes customers achieved (with metrics when available)

Vendor-published customer stories contain quantified outcomes (for example, improvements in time-to-patch and reductions in management overhead). These figures are vendor-published and were not independently validated in the sources reviewed.

Case Studies

- Vendor customer stories (representative examples) - Palo Alto Networks publishes customer stories for Prisma Cloud, including named references such as TIME and Global Atlantic as well as other examples. - Quantified outcomes (vendor-published) - Vendor materials include reported improvements in time to patch and reported reductions in management overhead. These are vendor-published metrics; methodology and baselines are not disclosed in the marketing excerpts. - Critical evaluation - The methodology for vendor metrics is not disclosed in the marketing summaries. Buyers should request detailed case studies with measurement methodology and confirm the environment and assumptions are comparable to their own. - Public sector case positioning - The government-focused offering is positioned for continuous authority to operate and FedRAMP High contexts. Agencies and contractors should validate ATO boundaries and specific service descriptions.

04Best fit

Ideal Customer Profile

- Company sizes: employee counts and revenue ranges - Typical fit often appears to include organizations with: - Mid-market to very large enterprises (from several hundred employees up to organizations with many thousands) - Mid-to-large revenue organizations (from the lower hundreds of millions to multi-billion-dollar scale) - Security teams that can dedicate resources to operational tuning and cloud security engineering - Industries and verticals where adoption is strongest - Regulated industries where compliance and auditability are priorities: banking, healthcare/biotech, education, and government-related organizations - Public sector organizations and contractors where high-assurance public-sector compliance standards are required - Roles and personas: decision makers AND end users - Decision makers - CISO, VP Security, Head of Cloud Security, Director of Security Engineering, Compliance leadership - End users - Cloud security engineers, DevSecOps practitioners, platform engineering, SecOps staff responsible for incident workflows - Pain points and challenges the product addresses - Multi-cloud visibility and governance - Compliance monitoring and audit readiness - Runtime protection for containers, hosts, and serverless workloads - Identity entitlement risk and CIEM - Shifting security left with CI/CD scanning and policy enforcement - Qualification criteria: indicators of a strong fit - Requirement for both posture management and runtime controls (not just CSPM) - Multi-cloud complexity where consolidation of tooling is desirable - Capacity to invest in rollout planning, tuning, and ongoing operations - Procurement through enterprise licensing agreements where consolidation with Palo Alto's broader portfolio is valued - Deal disqualifiers: indicators of a poor fit - Very small teams that require immediate outcomes with minimal tuning effort - Organizations that strongly prefer an extremely simple per-workload pricing model or minimal licensing complexity - Teams that only need basic posture checks and can meet requirements with native cloud provider tooling

05The pitch

What the product does (core value proposition in objective terms)

- Prisma Cloud is Palo Alto Networks' cloud-native application protection platform (CNAPP). It combines multiple cloud security capabilities across the lifecycle: code security (IaC, CI/CD, secrets, SCA), cloud posture/security governance (CSPM), cloud entitlement/identity risk (CIEM), workload/runtime protection (CWPP), and additional runtime controls such as WAAS/API security and threat detection. The vendor markets it with the tagline "code to cloud" and has described integrations with "cloud to SOC" workflows. - Prisma Cloud supports major public clouds including AWS, Azure, Google Cloud, Oracle Cloud Infrastructure, and Alibaba Cloud, providing a unified console for management and monitoring.

Target market and market positioning

Primary target appears to be mid-market to large enterprises operating multi-cloud and/or hybrid environments that require broad cloud security coverage including runtime protections as well as posture management.
Secondary target includes regulated and public-sector buyers; there is a specific Prisma Cloud for Government offering positioned for FedRAMP and FIPS requirements.

Get a comprehensive analysis of Palo Alto Networks Prisma Cloud including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →