Which component(s), if any, will Palo Alto Networks host and run when a customer purchases Prisma Cloud Enterprise Edition?

Prisma Cloud Enterprise Edition is a fully-managed SaaS service. Palo Alto Networks hosts and operates the single, multi-tenant Console service. Defenders, twistcli, and CI tools such as Jenkins are customer-deployed within their own environments.

A. Defenders – Always run in the customer’s workload clusters/hosts, not Palo Alto infrastructure.
C. Jenkins – Third-party CI server that the customer installs and manages.
D. twistcli – Command-line scanner distributed with Prisma Cloud; executed by customers locally or in CI.

1. Prisma Cloud Enterprise Edition Datasheet, “Hosted Components” section: “Console is operated by Palo Alto Networks; customers deploy Defenders.”

2. Prisma Cloud Administrator’s Guide (SaaS) 2024.1, “Enterprise Edition Architecture Overview”, para 2 (“Only the console service is SaaS-hosted by Palo Alto Networks”).