Skip to main content

Runtime Security

Runtime Security is the core module of Prisma AIRS CLI for real-time prompt scanning, configuration management, and guardrail generation.

What's in This Section​

  • Prompt Scanning — Scan individual prompts or bulk-scan from files against AIRS security profiles.
  • Configuration Management — Full CRUD for security profiles, custom topics, API keys, customer apps, deployment/DLP profiles, and scan logs.
  • Daily Environment Report — Read-only daily activity and configuration review, delivered as self-contained HTML or Markdown in your working directory.
  • Guardrail Generation — Atomic runtime topics commands (create, apply, evaluate, revert) that an external agent orchestrates to refine custom topic guardrails against a static prompt set.
  • DLP — Full CRUD over the DLP service: filtering profiles, patterns, profiles, dictionaries. Twenty commands, shared OAuth token cache.

Authentication​

Runtime scanning requires a Scanner API key (PANW_AI_SEC_API_KEY). Configuration management requires Management API credentials (mgmtClientId, mgmtClientSecret, mgmtTsgId in the selected tenant file). Guardrail generation requires both.

Exact command syntax

Every runtime command with options and example output lives in the CLI Reference.