Palo Alto Networks today rolled out its new Prisma cloud security suite as rumors swirled that the vendor had reached deals to acquire Twistlock and another security startup. The company is also scheduled to report its third quarter 2019 earnings today after the market closes.

Palo Alto Networks will buy container security startup Twistlock for between $450 million and $500 million, according to Israeli business publications Globes and Calcalist. Globes reports that Palo Alto Networks will also acquire another unnamed Israeli startup for an estimated $50 million to $100 million.

The Santa Clara, California-based security vendor would not comment on the acquisition rumors. But the startup purchases will likely be a hot topic during the question and answer part of today’s earnings call.

If the rumors are true, Palo Alto Networks will have bought seven security startups since 2017. Most recently, it paid $560 million for security, orchestration, automation, and response (SOAR) startup Demisto in February. In March 2018, it purchased public cloud security and compliance startup Evident.io for $300 million. In April 2018 it bought endpoint data collection and visualization firm Secdo. In October 2018, it acquired public cloud security startup RedLock for $173 million. And finally, in late February 2017 it bought behavioral analytics company LightCyber for $105 million.

Meanwhile, Palo Alto Networks today also announced a new cloud security portfolio, which includes four products and combines homegrown technology with recent acquisitions to govern access, protect data, and secure applications across multiple clouds.

The goal with Prisma is to give customers a single suite of products “to secure their journey to the cloud,” said Varun Badhwar, senior vice president of products and engineering of public cloud security at Palo Alto Networks, in an interview with SDxCentral. Badhwar also co-founded RedLock, and came to Palo Alto Networks through that acquisition.

“In that journey to the cloud, most organizations will tell you that visibility is the first challenge,” he said. “How do I know what cloud platforms are being used and what the risks are? The second is consistent security: how do you secure users, applications, and data when the controls offered by AWS are very different than those offered by Azure and so forth. And third: how do you investigate and respond to threats in these environments?”

The answer is Prisma, Badhwar said, and it addresses these challenges with four products.

Prisma Access, which was formerly known as GlobalProtect cloud service, secures access to the cloud. “It provides the connectivity layer to secure data moving from the branch offices and mobile users anywhere in the world,” Badhwar said. Currently it runs on Amazon Web Services (AWS) and Microsoft Azure, and will “soon” run on Google Cloud Platform (GCP). This will extend the service to more than 100 locations, Badhwar said.

The product also has a new cloud management user interface that the vendor says makes it easier to onboard branches and users, and it added capabilities for service providers to provision secure outbound internet connectivity for their customers.

The second product, Prisma Public Cloud and used to be called RedLock, combines technologies from RedLock and Evident to provide visibility, security, and compliance monitoring across AWS, Azure, and GCP. “You’ll see a lot more clouds supported as well in the future,” Badhwar said.

This product also has new DevSecOps abilities that can detect vulnerabilities and fix configurations in code while in the continuous integration and continuous delivery (CI/CD) process. This means developers can detect and fix bugs “early and not wait for them to manifest in production,” Badhwar said.

Prisma SaaS, the third product, is a cloud access security broker (CASB) service that combines earlier products Aperture and GlobalProtect. This cloud service provides traditional CASB functions across companies’ software-as-a-service (SaaS) applications: risk discovery, adaptive access control, data loss prevention, compliance assurance, data governance, user behavior monitoring, and advanced threat prevention. It also adds new integrations to unify visibility and management across IT-sanctioned and IT-unsanctioned SaaS applications.

And finally, Prisma’s fourth product is VM-Series, the virtualized form factor of the Palo Alto Networks Next-Generation Firewall that can be deployed in private and public clouds including AWS, GCP, Azure, Oracle Cloud, Alibaba Cloud, and VMware- and OpenStack-based private clouds.