LAS VEGAS – Palo Alto Networks continues to pump up its Prisma Cloud platform with a range of new capabilities including the Secrets Security and API risk profiling, which are designed to improve application security from code to cloud. The updates were announced alongside the vendor's Ignite event this week.

The vendor added Prisma Cloud Secrets Security to its cloud-native application protection platform (CNAPP), which aims to prevent the leak of secrets, such as access keys and other sensitive data that often make their way into production environments.

It “is the industry’s first integrated CNAPP solution to combine signature-based secrets detection with a fine-tuned entropy model that leverages string context for high fidelity discovery and alerting,” Ankur Shah, SVP of Prisma Cloud at Palo Alto Networks, wrote in a post.

Shah called this addition “a significant shift-left enhancement,” with Prisma Cloud now scanning all files, including infrastructure-as-code and source code.

“This solution offers full application lifecycle protection by scanning for hardcoded secrets in code pre-commit, in your version control system and continuous integration (CI) pipelines,” Shah touted.

This is the latest CNAAP portfolio update for code-to-cloud security. Palo Alto Networks previously added context-aware software composition analysis and software bill of materials (SBOM) to Prisma Cloud to secure open-source software.

Palo Alto Networks also introduced API risk profiling, which helps to protect cloud-native applications that rely on APIs for communication.

“Prisma Cloud has enhanced its web application and API security capabilities with API risk profiling. With this innovation, the Prisma Cloud API Security solution understands and prioritizes risks based on 200-plus factors for every API in your environment,” Shah explained.

Security operations teams can use this feature to automatically discover all APIs in their environment, understand the risks associated with them, and prioritize remediation tasks, he added.

Palo Alto Networks also announced the integration of its cloud infrastructure entitlement management (CIEM) with Amazon Web Services' (AWS) IAM Identity Center, along with more than 25 new features for Prisma Cloud.