Palo Alto Networks advances cybersecurity with the Databricks Data + AI Platform

Overview

Palo Alto Networks adopted the Databricks Data + AI Platform, including Unity Catalog, Delta Lake and Spark Declarative Pipelines, to unify fragmented data across its Prisma Cloud modules, achieving 3x faster iterations on AI/ML features, a 20% reduction in COGS, 3x decrease in engineering development time, and 40% less time on data preparation.

The challenge

Data fragmentation across Palo Alto Networks' Prisma Cloud platform created challenges in managing governance, enhancing analytics and fostering collaboration, since each Prisma Cloud module operated with its own storage mechanisms, data models and governance protocols, creating data silos.

The solution

Palo Alto Networks adopted the Databricks Data + AI Platform, starting with Unity Catalog to centralize and standardize data cataloging across cloud modules. Delta Lake and Spark Declarative Pipelines provided infrastructure for managing real-time information such as system configurations and threat alerts, while Databricks SQL and autoscaling clusters supported threat detection. Databricks also underpins Palo Alto's generative AI Precision AI initiative, covering Secure With AI, Secure the AI, and AI Experiences.

Reported business value

By centralizing data workflows, Databricks has contributed to approximately 3x faster iterations on AI/ML features. Operational costs have also dropped, with Palo Alto reporting a 20% reduction in the cost of goods sold (COGS) and a 3x decrease in engineering development time. Teams can deliver faster security solutions with a 50x greater scale capability than previous systems. Over 20 engineers became productive on Databricks within just two months, and application-specific use cases now require 40% less time in data preparation and movement across silos.