Prisma AIRS AI Inventory displays security posture data alongside
discovered assets, giving security teams risk context without switching tools.
This feature supports:
Posture issues. Models, agents, model endpoints, and
training datasets show posture issues sourced from Cortex Cloud AI-SPM,
with severity ratings (Critical, High, Medium, Low), the violated policy
rule, and remediation guidance.
Compliance mappings. Policy rules map to OWASP Top 10
for LLMs and other compliance frameworks, surfacing which requirements
an asset is failing.
Dataset data classification. Training datasets display
whether they contain PII or sensitive data, identified through Cortex
data profiling.
The inclusion of the Security Coverage tab. Each asset
detail page now includes a Security Coverage tab
showing which AIRS products have assessed the asset, including AI Red
Teaming results.
Posture data requires an active Cortex Cloud AI-SPM
license connected to your AIRS tenant.
Prisma AIRS Posture Management integrates Cortex Cloud's AI Security
Posture Management (AI-SPM) capabilities into the Prisma AIRS platform,
providing unified visibility, risk assessment, and security controls across your
AI asset landscape.
This integration addresses a critical gap in AI security: discovery
without protection, and protection without discovery. By
combining AI-SPM's asset discovery and posture analysis with Prisma AIRS's model
security scanning, red teaming, and runtime protection, security teams gain a
single platform to manage the full AI security lifecycle. The following key
capabilities are supported:
AI asset discovery. Complete inventory of models,
endpoints, datasets, and agents across AWS, GCP, and Azure.
Posture risk analysis. Identify misconfigurations,
vulnerabilities, and compliance violations across all AI assets.
Data classification. Detect and classify sensitive data
in training and inference datasets
Integrated security workflows. Launch model security scans, red
teaming assessments, and runtime protection from a unified
interface.
Compliance assessment. Evaluate AI assets against OWASP
Top 10 for LLMs, EU AI Act, NIST, and MITRE frameworks.
Reporting. Generate PDF reports covering AI asset
inventory and posture analysis.
What Posture Management Covers
Posture management operates on the AI assets Discovery has enumerated —
models, agents, model endpoints, and datasets across AWS, Azure, and GCP. For
each asset, two types of posture data are maintained:
Posture Policy Rules
Policy rules define the compliance standards and security controls your
AI assets are evaluated against. Rules are classified as AI-class and map to
established frameworks including the OWASP Top 10 for LLMs and other compliance
standards.
Rules represent the expected secure state. Each rule describes a
control — for example, requiring that model endpoints are not publicly
accessible, or that training datasets do not contain unencrypted PII.
Posture Issues
A posture issue is raised when an asset violates a policy rule. Issues
are categorized as:
Misconfigurations — asset is configured in a way that violates
a security policy
Vulnerabilities — known weaknesses in the asset or its
underlying infrastructure
Compliance violations — the asset does not satisfy a mapped
compliance framework requirement
Each issue carries a severity rating:
| Severity | Meaning |
| Critical | Immediate risk; requires urgent remediation |
| High | Significant risk; should be prioritized |
| Medium | Moderate risk; address in normal cycle |
| Low | Minor issue; informational or best-practice gap |
Prerequisites
Viewing Posture Issues
From the Asset Inventory
The AI Inventory list view shows issue counts per asset. You can filter
the full inventory by posture severity to surface assets with the
highest-priority issues first:
Open the AI Inventory page.
Use the severity filter to scope the view to Critical, High,
Medium, or Low issues.
Assets are shown with their issue counts by
severity level.
From the Asset Detail Page
Selecting any asset opens the detail panel, which includes posture data
inline:
Issue counts by severity — a summary of how many critical,
high, medium, and low issues exist for this asset
Individual issues — each issue includes the violated policy
rule, a description of the violation, severity, and compliance framework
mappings
Remediation guidance — steps to resolve the misconfiguration or
violation
Dataset Data Classification
For training datasets, Discovery surfaces data classification results
from Cortex AI-SPM in addition to posture issues. Data classification identifies
whether a dataset contains:
This is distinct from posture issues but informs risk assessment — a
dataset with PII that is used to train a publicly exposed model represents a
compound risk that posture alone does not capture.
Data classification results appear on the dataset asset
detail page alongside posture issues.
Asset Relationships and Posture Risk
Because Discovery maintains dependency graphs between AI assets,
posture issues on one asset can be understood in the context of what depends on
it.
Example: a foundation model with a Critical misconfiguration that is
used by three agents in production has a different blast radius than the same
issue on an unused model. The relationship graph on any asset detail page
shows:
Which agents use this model
Which datasets trained this model
Which endpoints serve this model
Use this context when prioritizing remediation — issues on heavily
connected assets warrant earlier attention than isolated ones.
Security Coverage
Beyond posture policy checks, the Security Coverage tab on each
asset detail page shows which AIRS security products have actively assessed the
asset. This is complementary to posture: policy rules check configuration state,
while security product assessments test for active exploitability and runtime
behavior.
Posture Coverage by Asset Type
| Asset Type | Posture Issues | Data Classification |
| Managed cloud models | Yes | No |
| Custom/self-hosted models | No | No |
| Managed agents | Yes | No |
| Self-hosted agents | No | No |
| Model endpoints | Yes | No |
| Training datasets | Yes | Yes |
Troubleshooting
Assets are not appearing after connecting my tenant.
Check that your Cloud Account Status in Cortex Cloud Tenant Console
status shows as Connected status in Settings > Cloud Accounts. If any show
Disconnected or Warning, resolve the issue in Cortex Cloud first. Initial
ingestion may take up to one hour after first connecting a Cortex Cloud tenant
with SCM.
A risk I resolved still shows in Prisma AIRS.
Risk status refreshes on a regular sync cycle from Cortex Cloud. After
resolving a finding, allow until the next sync window for the updated status to
appear in SCM.
Frequently Asked Questions
Q: Where does the posture policy rule set come from?
Rules are defined and maintained in Cortex Cloud AI-SPM as AI-class
policies. They include mappings to OWASP Top 10 for LLMs and other compliance
frameworks. You manage which policies are active and their enforcement
configuration within Cortex.
Q: Can I create custom posture policies?
Policy rule management is handled in Cortex Cloud AI-SPM. Changes made
there are reflected in the AIRS AI Inventory on the next sync cycle.
Q: How often does posture data refresh?
Cortex posture data syncs on a batch schedule (approximately twice
daily). Issues resolved in Cortex will be reflected in the AIRS inventory after
the next sync.
Q: An asset shows issues but I've already remediated them in my cloud
provider. Why does the inventory still show them?
Posture state is derived from what Cortex has last scanned. The issues
will clear after Cortex re-evaluates the asset and the updated state syncs to
AIRS. If issues persist beyond two sync cycles after remediation, verify that
the change is reflected in Cortex directly.
Q: Can I see a history of posture issues for an asset — not just the
current state?
Current inventory views reflect the latest known posture state.
Historical issue tracking is managed within Cortex Cloud AI-SPM.
