Protect AI
Former AI security startup, now Palo Alto Networks' Prisma AIRS product line since July 2025.
On the record
Checkpoint: PANW quarterly earnings commentary on Prisma AIRS traction and Portkey integration
The call
This is no longer a company to bet on or against, it's a product line inside Palo Alto Networks, and its fate depends on PANW's roadmap choices, not its own survival.
Protect AI built tools to test and protect artificial intelligence systems from attacks and problems. It is no longer a standalone company after Palo Alto Networks purchased it for roughly five hundred to seven hundred million dollars in summer 2025, so anyone joining now gets stock options in the large parent company instead of the startup. The real question is whether Palo Alto will keep investing in Protect AI's technology as promised or let it fade while the company juggles multiple other huge acquisitions happening at the same time, which means watching whether the original founders stay around and whether earnings reports show the Protect AI products are actually gaining customers inside Palo Alto's bigger platform.
Why
01
AI pressure: Open-source tools like Garak, Promptfoo, NeMo Guardrails. Free scanning and red-teaming tools commoditize the basic model-checking work this team used to sell as a product. Could AI do the core job? Only partly.
02
Bigger players: Palo Alto Networks internal prioritization, plus Cisco (Robust Intelligence), Check Point (Lakera), Google (Wiz). The real risk now is whether PANW keeps building on this team's tech or lets it fade behind newer buys like Portkey. Could a giant copy it? Yes, easily.
03
What protects it. PANW paid up to $700M for this team and is actively wiring its Guardian, Recon, and Layer tools into Prisma AIRS 2.0 and 3.0.
What would change this call
Founders Ian Swanson, Daryan Dehghanpisheh, or Badar Ahmed depart PANW before mid-2027. Would show early unraveling of the acquired team ahead of typical retention timelines.
PANW earnings calls stop mentioning Prisma AIRS or Guardian/Recon/Layer by name. Would show the Protect AI product line losing internal visibility and priority.
Prisma AIRS 3.0/4.0 roadmap centers on Portkey's gateway with reduced Guardian/Layer scanning features. Would show Protect AI's original tech being sidelined in favor of the newer Portkey acquisition.
PANW earnings calls stop mentioning Prisma AIRS or Guardian/Recon/Layer by name. Would show the Protect AI product line losing internal visibility and priority.
Prisma AIRS 3.0/4.0 roadmap centers on Portkey's gateway with reduced Guardian/Layer scanning features. Would show Protect AI's original tech being sidelined in favor of the newer Portkey acquisition.
Key numbers
- Acquired by Palo Alto Networks for $500M-$700M
- Guardian scanned 4M+ Hugging Face models
- Raised $108.5M total before acquisition
Named risks
- Founder exit before standard 1 to 2 year post-acquisition retention cliff.
- PANW consolidates Prisma AIRS around newly acquired Portkey instead of Protect AI's original stack.
- AI-security segment goes quiet in PANW quarterly earnings, signaling deprioritization.
- Open-source commoditization of scanning and red-teaming erodes standalone product value.
- Concurrent PANW mega-M&A (CyberArk $25B, Chronosphere $3.35B, Koi ~$400M) dilutes focus on ex-Protect AI product line.
Rivals, as read in July 2026
| Rival | Direction | Evidence |
|---|---|---|
| Cisco (Robust Intelligence) | contesting | Cisco absorbed Robust Intelligence into Cisco AI Defense, competing platform vs platform since 2024 |
| Check Point (Lakera) | contesting | Check Point closed Lakera acquisition around Sep to Nov 2025, mirroring PANW's Protect AI move |
| Google (pending Wiz acquisition) | contesting | Wiz's pending Google acquisition threatens to bundle AI-SPM into Google's cloud-native security stack |
| HiddenLayer | losing to | HiddenLayer remains independent while Protect AI's tech is now locked inside PANW's Prisma AIRS as of Jul 2025 |
| Open-source tools (Garak, Promptfoo, NeMo Guardrails) | losing to | Commodity scanning and red-teaming functions increasingly replicated free and open-source through 2026 |
Questions people ask
- Is Protect AI still an independent company in 2026?
- No. Palo Alto Networks completed its acquisition of Protect AI on July 22, 2025, for an estimated $500 to 700 million. Protect AI no longer exists as a standalone legal entity; its Guardian, Recon, and Layer tech now runs inside PANW's Prisma AIRS platform, versions 2.0 (Oct 2025) and 3.0 (Mar 2026).
- Who owns Protect AI now?
- Palo Alto Networks (NASDAQ: PANW) owns Protect AI outright, having closed the acquisition on July 22, 2025. Protect AI's founders and employees were expected to join PANW, and its products are now marketed as components of PANW's Prisma AIRS AI security platform.
- Could AI or open-source tools replace Protect AI's scanning technology?
- Commodity functions like signature-based model scanning and automated red-teaming are increasingly replicated by open-source tools such as Garak, Promptfoo, and NeMo Guardrails as of 2026. Protect AI's harder-to-replace asset is its huntr bug-bounty community of 17,000 to 18,000 researchers and its Hugging Face scanning history covering over 4 million models as of April 2025.
- Who are Protect AI's biggest competitors now that it's part of Palo Alto Networks?
- Its former peers were HiddenLayer, Lakera (acquired by Check Point in 2025), Robust Intelligence (acquired by Cisco in 2024), and Wiz (pending Google acquisition). By 2026 the AI-security category had consolidated into these large-platform owners, with Protect AI's tech now competing as part of PANW's Prisma AIRS rather than standalone.
- Was Protect AI profitable before being acquired?
- There is no public evidence Protect AI reached profitability. It raised at least $108.5 million across Seed (Dec 2022), Series A (Jul 2023), and a $60 million Series B (Aug 2024, per enterpriseaiworld.com) before Palo Alto Networks acquired it on July 22, 2025, folding it into a much larger revenue base.
- What products did Protect AI build and where are they now?
- Protect AI built Guardian (model scanning), Recon (automated AI red-teaming), and Layer (runtime monitoring), plus the open-source NB Defense and huntr bug-bounty community. Since July 22, 2025, these are integrated natively into Palo Alto Networks' Prisma AIRS, with Prisma AIRS 2.0 shipping Oct 28, 2025 and 3.0 announced March 23, 2026.
Timeline
- 2026-07-16Portkey AI Gateway reaches general availability inside Prisma AIRS
- 2026-05-29Palo Alto Networks completes acquisition of Portkey AI Gateway
- 2026-03-23Palo Alto Networks announces Prisma AIRS 3.0 Agent Security Platform
- 2025-10-28Prisma AIRS 2.0 launches with native Protect AI integration
- 2025-07-22Palo Alto Networks completes acquisition of Protect AI
- 2025-04-28Palo Alto Networks announces intent to acquire Protect AI
- 2024-08-07Protect AI closes $60M Series B financing
- 2024-07-31Protect AI acquires SydeLabs
- 2023-07Protect AI raises $35M Series A led by Evolution Equity Partners
- 2022-12Protect AI raises $13.5M seed round
Revision history
21 July 2026
First assessed. Defensible for now. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources
- Palo Alto Networks Completes Acquisition of Protect AI (2025-07-22)
- Protect AI Stock Price, Funding, Valuation, Revenue & Financial Statements (2025-07-16)
- Palo Alto Networks to buy Protect AI, strengthen AI security platform (2025-04-29)
- Palo Alto Networks Announces Intent to Acquire Protect AI (2025-04-28)
- ML Model Security Gateway (2026-02-04)
- Palo Alto Networks Secures the AI Agent Revolution with the Launch of Prisma AIRS 2.0 (2025-10-28)
- Securing the AI Enterprise, Introducing Prisma AIRS 3.0 (2026-03-23)
- Palo Alto Networks Completes Acquisition of Portkey to Secure AI Agents (2026-05-29)
- Announcing the General Availability of Prisma AIRS AI Gateway (2026-07-16)
- How Much Did Protect AI Raise? Funding & Key Investors (2025-05-22)
- Welcome, Protect AI! (2023-08-16)
- Protect AI 2026 Company Profile