>
    Strata Copilot
    Create and Manage Exception Patterns
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma AIRS
    3. AI Runtime Security
    4. AI Runtime Security API Intercept
    5. False Positive/False Negative (FP/FN) Reporting and Auto Remediation
    6. Create and Manage Exception Patterns
    Download PDF
    Prisma AIRS

    Create and Manage Exception Patterns

    Table of Contents

    Create and Manage Exception Patterns

    Create exception patterns to override AI Runtime Security detection verdicts for specific content, and attach them to AI Security Profiles.
    Where Can I Use This?What Do I Need?
    • Prisma AI Runtime Security
    • Prisma AIRS AI Runtime Security license
    • AI Runtime Security deployed (network intercept or API intercept)
    Exception patterns let you override AI Runtime Security detection verdicts for specific content without reporting an incorrect verdict first. Benign patterns override false positives. Malicious patterns override false negatives. The AI Security Profile then applies its configured enforcement actions (such as Allow, Alert, or Block) based on the resulting verdict. You can create patterns independently in ConfigurationsException Patterns, test them in the sandbox before saving, and attach them to one or more AI Security Profiles.

    Create an exception pattern

    Create an exception pattern and test it in the sandbox before attaching it to an AI Security Profile.
    Create an exception pattern independently of any AI Security Profile and test it in the sandbox before saving.
    1. In Strata Cloud Manager, go to AI SecurityAI Runtime APIConfigurationsException Patterns.
    2. Click Create New.
    3. Enter the label.
    4. For type, choose the matching behavior:
      • Exact Match — The exception applies when the entire prompt, response, tool call, or tool response equals the pattern (leading and trailing spaces ignored).
      • Regex Pattern Match — If the future payload matches the provided regex pattern, it will overrule the detection service.
    5. In Pattern, enter the text payload for which you want to override the verdict.
    6. In the sandbox, click Run Test to verify the pattern matches expected content before saving.
    7. Click Create.
      The pattern is available to attach to any AI Security Profile.

    Attach an exception pattern to an AI Security Profile

    Attach exception patterns to an AI Security Profile from its Exceptions tab.
    Attach one or more exception patterns to an AI Security Profile.
    1. In Strata Cloud Manager, go to AI SecurityAI Runtime APIConfigurations.
    2. In the Security Profile tab, select the AI Security Profile you want to update.
    3. Click Edit.
    4. Select the Exceptions tab.
    5. In the table for the verdict you want to override, select the exception patterns. By default, a pattern covers all four content types (prompt, response, tool call, and tool response). You can limit it to one: select Configure detections separately for each content type, then choose the content type.
    6. Click Save Changes.
    Exception patterns take effect within about one minute of saving and apply to all new scans (synchronous, inference hooks, and asynchronous). Existing scans keep their original verdict. Go to AI SecurityAI Runtime APIAI Sessions and select your AI Session. When a pattern overrides a verdict, the Sessions and Violations views display Exception Pattern Matched.

    © 2026 Palo Alto Networks, Inc. All rights reserved.