Focus

New Features - Prisma AIRS - December 2025


Customize Security Groups and View Enhanced Scan Results

Release Date: December 2025 | Last Updated: May 2026

The AI Model Security web interface has been enhanced with the following new features that provide deeper insights into model violations and offer greater flexibility for customizing your security configuration. Below are the key new capabilities:

  • Customize Security Groups —In addition to the set of default groups created for all new users, you can now create new custom model security groups directly using Strata Cloud Manager. Additionally, edit names and descriptions of existing security groups and delete the unused security groups (except the default ones).
  • File Explorer —For each scan, you can now view the visualization of every file scanned by AI Model Security in its original file structure. You can also view detailed, file-level violation information for every scanned file.
  • Enhanced JSON View —You can now view direct JSON responses from the API for scans, violations, and rule evaluations. The JSON view also provides detailed instructions on how to retrieve this data from your local machine.

Decommission AI Runtime Firewalls

Release Date: December 2025 | Last Updated: May 2026

You can decommission deployed firewalls and associated cloud resources through Strata Cloud Manager when your network infrastructure changes or evolves. This Terraform-based auto-execute deployment process allows you to cleanly remove specific firewall deployments, their underlying cloud resources, and release the Software NGFW credits that were consumed for licensing those firewalls. You would typically use this feature when reorganizing your network architecture, scaling down your security infrastructure, or retiring specific firewall instances that are no longer needed in your environment. The decommissioning process provides you with the flexibility to optimize your resource allocation and costs while maintaining the ability to deploy new firewalls in the same cloud account as your requirements change. You can monitor the entire removal process through the Cloud Task log to track progress and identify any potential issues, ensuring you have full visibility into the decommissioning workflow. This capability is particularly valuable when you need to make rapid adjustments to your security posture or when transitioning between different deployment configurations without impacting your overall cloud account infrastructure.

Error Logs and Partial Scan Reports

Release Date: December 2025 | Last Updated: May 2026

When you conduct AI Red Teaming scans using Prisma AIRS, you may encounter situations where scans fail completely or complete only partially due to target system issues or connectivity problems. The Error Logs and Partial Scan Reports feature provides you with comprehensive visibility into scan failures and enables you to generate actionable reports even when your scans don't complete successfully. You can access detailed error logs directly within the scan interface, both during active scans on the progress page and after completion in the scan logs section, allowing you to quickly identify whether issues stem from your target AI system or the Prisma AIRS platform itself.

This feature particularly benefits you when conducting Red Teaming assessments against enterprise AI systems that may have intermittent availability or response issues. When your scan completes the full simulation but doesn’t receive valid responses for all attacks, AI Red Teaming marks it as partially complete rather than failed. You can then choose to generate a comprehensive report based on the available test results, giving you valuable security insights even from incomplete assessments. AI Red Teaming transparently informs you about credit consumption before report generation and clearly marks any generated reports as partial scans, indicating the percentage of attacks that received responses.

By leveraging this capability, you can maximize the value of your Red Teaming efforts, troubleshoot scanning issues more effectively, and maintain continuous security assessment workflows even when facing target system limitations or temporary connectivity challenges during your AI security evaluations.