Palo Alto Networks launched major updates across its portfolio, including a secure browser for agentic AI, Next-Generation Trust Security, and Prisma AIRS for unified agentic AI security [1][2][3]. These moves signal a bet that agentic AI will reshape enterprise security priorities, creating both opportunity and risk. According to Futurum Group’s 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 62.1% agree AI-powered defensive tools are now a necessity, but 46.3% experienced three or more significant security incidents in the past year.
What is Covered in this Article
- Palo Alto Networks’ agentic AI security platform strategy
- The rise of secure browsers and certificate automation for AI-driven enterprises
- Agentic AI lifecycle security and Prisma AIRS positioning
- Execution risks and competitive dynamics in the AI security market
The News
Palo Alto Networks announced three major product enhancements targeting the agentic AI era. First, the company introduced what it claims is the industry’s most secure browser, designed to protect agentic AI workflows and agent interactions across the enterprise [1]. Second, it launched Next-Generation Trust Security, automating certificate lifecycle management and accelerating readiness for post-quantum cryptography [2]. Third, the new Prisma AIRS platform aims to deliver unified, end-to-end security for agentic AI, covering everything from agent creation to deployment and runtime [3].
These launches come as enterprises face a surge in AI-powered attacks and a shift toward agentic AI architectures. According to Futurum Group’s 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 62.0% of organizations have observed a significant increase in sophisticated AI-driven social engineering attacks, and 65% cite security and data privacy as their top concern when adopting agentic AI (AI Platforms Decision Maker Survey, n=838, 1H 2026).
Analyst Take
Palo Alto Networks is positioning itself as the default security stack for enterprises embracing agentic AI. The company is betting that traditional perimeter and endpoint models can’t keep up with autonomous agents, dynamic workflows, and AI-powered threats. This is a high-stakes move that could either cement Palo Alto’s leadership or expose it to new forms of competition.
Agentic AI Demands Security at Every Layer
Agentic AI changes the attack surface. Autonomous agents interact with data, apps, and users in ways that break legacy security assumptions. Prisma AIRS aims to secure the entire agentic lifecycle, not just endpoints or networks [3]. According to Futurum Group’s 2H 2025 Cybersecurity Decision Maker Survey (n=1,008), 62.1% of decision-makers now see AI-powered defensive tools as essential. Yet, 82.3% experienced at least one significant security incident in the past year, and 62.0% have seen a rise in AI-driven social engineering. The implication: security vendors must address both the sophistication and scale of new threats, not just automate old controls.
Agentic AI Browsers Become the New Enterprise Control Plane
The launch of a secure browser purpose-built for agentic AI is a direct response to the reality that browsers are now the primary interface for both users and AI agents [1]. With more workflows shifting to SaaS, cloud, and AI-driven apps, the browser becomes the de facto control plane. This creates both an opportunity for security vendors to add value and a risk of overreach. Microsoft, Google, and CrowdStrike are all making browser security plays. The question is whether Palo Alto can differentiate on agentic AI protections, or if this becomes a commodity feature in broader platforms.
Execution Risk: Can Palo Alto Networks Move Faster Than Agentic AI Threats?
Palo Alto’s push into certificate lifecycle automation and post-quantum readiness is timely, but execution risk looms [2]. As agentic AI adoption accelerates—65% of organizations are already researching, piloting, or deploying agentic AI (AI Platforms Decision Maker Survey, n=838, 1H 2026)—attackers are also adapting. The company faces competition from both traditional security vendors and hyperscalers embedding security into their agentic AI platforms. According to Futurum’s Cybersecurity Market Forecast (2024-2029), cloud-delivered security will grow at 15.2% CAGR, outpacing the broader market. Palo Alto must prove it can deliver integrated, AI-native security for agentic AI at hyperscaler speed and scale.
What to Watch
- Browser Wars: Will secure browsers become a must-have for agentic AI, or just another feature?
- AI Agent Blind Spots: Can Palo Alto detect and stop agent-driven threats that evade legacy controls?
- Hyperscaler Encroachment: Will Microsoft, Google, or AWS subsume security into their AI platforms by 2027?
- Certification and Trust: Can Palo Alto set the standard for agentic AI security, or will reference architectures from NVIDIA and Cisco win enterprise trust?
Sources
1. Palo Alto Networks Unveils the Industry’s Most Secure Browser Built for Agentic AI
3. Palo Alto Networks Unlocks the Agentic Enterprise with Prisma AIRS
Declaration of generative AI and AI-assisted technologies in the writing process: This content has been generated with the support of artificial intelligence technologies. Due to the fast pace of content creation and the continuous evolution of data and information, The Futurum Group and its analysts strive to ensure the accuracy and factual integrity of the information presented. The Futurum Group makes no guarantees regarding the completeness, accuracy, or reliability of any information contained herein. Readers are encouraged to verify facts independently and consult relevant sources for further clarification.
Disclosure: Futurum is a research and advisory firm that engages or has engaged in research, analysis, and advisory services with many technology companies, including those mentioned in this article. The author does not hold any equity positions with any company mentioned in this article.
Analysis and opinions expressed herein are specific to the analyst individually and data and other information that might have been provided for validation, not those of Futurum as a whole.
Read the full Futurum Group Disclosure.
Author Information
This content is written by a commercial general-purpose language model (LLM) along with the Futurum Intelligence Platform, and has not been curated or reviewed by editors. Due to the inherent limitations in using AI tools, please consider the probability of error. The accuracy, completeness, or timeliness of this content cannot be guaranteed. It is generated on the date indicated at the top of the page, based on the content available, and it may be automatically updated as new content becomes available. The content does not consider any other information or perform any independent analysis.
