This playbook creates a summary report of the vulnerabilities and compliance issues found within a Prisma Cloud Compute deployment.

Parses Prisma Cloud Compute vulnerability alerts.

August 9, 2024 - Over 30 different upstream providers are aggregated to include the most accurate CVE data. This includes open source feeds, private threat data, and commercial feeds. Prisma Cloud Compute also consumes the operating system vendor’s official upstream data which improves vulnerability accuracy resulting in fewer false positives and negatives.

Learn how to install, configure, and operate Compute Edition

Built on top of the most reputable vulnerability databases and connected to the industry’s most robust infrastructure policy database, Prisma Cloud Software Composition Analysis (SCA) surfaces vulnerabilities with the context developers need to understand risk and implement fixes fast.

To make it easier to understand ... vulnerabilities to layers. This tool helps you assess how vulnerabilities were introduced into an image, and pick a starting point for remediation....

June 11, 2025 - Through the Intelligence Stream, Prisma Cloud should be able to alert on any relevant vulnerabilities that exist in scanned environments, regardless of having a CVE or not. Our researchers monitor open-source code repositories continuously to detect publicly discussed but undisclosed vulnerabilities that are not tracked under a CVE record. Upon finding such a vulnerability, the researchers complete a full analysis of the vulnerability including assessing its severity and describing its impact, and finally assign a PRISMA ID.

Learn how to install, configure, and operate Compute Edition

August 6, 2024 - Learn how to install, configure, and operate Compute Edition

Prisma Cloud leverages the CVSS ... projects. The CVSS framework captures the principal characteristics of a vulnerability and produces a numerical score that reflects the severity of the vulnerability....

April 28, 2024 - Welcome to the documentation for Enterprise Edition, a Cloud Native Application Protection Platform (CNAPP) that protects your applications from code to cloud, reduces risks, and ...

June 11, 2025 - Unlock the full potential of Prisma Cloud with our Content Collections. These comprehensive resources are your key to mastering the suite of functionality available on ...

June 11, 2025 - For known vulnerabilities with a CVE, we rely on the most authoritative source - for OS packages (packages that are maintained by the OS vendor, marked as type "package" in Compute), the CVE details are taken from the specific vendor feed. For other CVEs, the information is taken from official sources like NVD and vendor-specific Security Advisories. For new vulnerabilities missing analysis or undocumented vulnerabilities (such as PRISMA-IDs), we rely on severity determined by our researchers.

Skip to main contentSkip to search · Powered by Zoomin Software. For more details please contactZoomin · Log in to get a better experience · Log in · The world works with ServiceNow.™ · Terms and conditions · Privacy statement · AI Acceptable Use Policy · ©2026 ServiceNow.

This is considered a self-service cloud offering that can be used to monitor cloud environments to inventory and track deployments, any configuration mistakes, and provide additional insight into attacker activity. It also supplies a single interface to evaluate the cloud environments, including ...

Import vulnerabilities detected by Prisma Cloud Compute in deployed container images into ServiceNow and enable remediation workflow involving security and application development teams to prioritize and remediate the most critical vulnerabilities in your container images.

Skip to main contentSkip to search · Powered by Zoomin Software. For more details please contactZoomin · Log in to get a better experience · Log in · The world works with ServiceNow.™ · Terms and conditions · Privacy statement · AI Acceptable Use Policy · ©2025 ServiceNow.

October 17, 2022 - ​​​​The Prisma Cloud Compute vulnerability scanner scans images with running containers by default.

Prisma Cloud only reports information on a vulnerability if it is actively present and vulnerable on a specific asset. Because of this, the remediation status of a vulnerability is determined by its presence in the sync data, meaning that Vulcan recognizes a vulnerability as fixed only when ...