Which pillar of the Prisma Cloud platform provides support for both public and private clouds as well as flexible agentless scanning and agent-based protection?

The Cloud Workload Protection (CWP) pillar of the Prisma Cloud platform is specifically designed to secure modern applications, including hosts, containers, and serverless functions. A key differentiator of CWP is its flexible deployment model, which supports environments across public clouds (AWS, Azure, GCP), private clouds (VMware, OpenShift), and on-premises data centers. It provides both agentless scanning for visibility into vulnerabilities and compliance on dormant workloads and agent-based protection (via Defenders) for comprehensive runtime security on active workloads.

A. Cloud Network Security focuses on network traffic analysis and microsegmentation, not the comprehensive agent-based and agentless protection of the workloads themselves.
B. Cloud Security Posture Management (CSPM) is primarily agentless and focuses on the security configuration of cloud infrastructure, not runtime protection of workloads.
C. Cloud Identity Security is focused on Cloud Infrastructure Entitlement Management (CIEM), managing permissions and access, not workload protection.

1. Palo Alto Networks, Prisma Cloud Datasheet. "Cloud Workload Protection". The official product datasheet describes CWP capabilities, highlighting support for hybrid and multi-cloud environments and its dual approach of using agentless scanning and agent-based runtime defense.

2. Palo Alto Networks, Prisma Cloud Platform Architecture Guide. "Platform Components". This guide details the different modules, explaining that CWP (which includes technology from the Twistlock acquisition) provides the agent-based and agentless capabilities for securing compute workloads across any cloud.