Palo Alto Networks Launches Continuous AI Defense for Enterprise Attack Paths

Palo Alto Networks has launched an always-on offensive security service that uses advanced AI models to identify, validate and help remediate enterprise attack paths before adversaries can exploit them.

Unit 42 Continuous Frontier AI Defense expands a point-in-time assessment introduced in April into continuous testing. The service combines cyber-focused models, Unit 42 threat intelligence and human offensive security expertise to examine web applications, APIs, cloud infrastructure, source code repositories and network assets.

The company says its proprietary multi-model harness can route security tasks to the model best suited for the work. The service includes gated models such as Anthropic's Claude Mythos 5 and OpenAI's GPT-5.6-Cyber, alongside open-weight models.

That design reflects a practical limitation of AI security testing: no single model is consistently strongest at every stage of vulnerability discovery, exploit validation and remediation. A multi-model system may broaden coverage, but its value will depend on the quality of the surrounding evidence, access controls and human review.

The service first builds a baseline of an organization's environment, then retests as applications and infrastructure change. Palo Alto Networks says it uses non-destructive adversary simulation to confirm whether suspected weaknesses form an exploitable end-to-end path. Results are prioritized for remediation under Unit 42 oversight.

Continuous validation could help security teams reduce a familiar source of wasted effort: vulnerability lists that rank theoretical severity without proving whether an attacker can reach or chain the affected systems. It also introduces governance questions around granting an AI-driven testing system broad visibility into production environments and sensitive code.

Palo Alto Networks claims AI-assisted attackers have compressed some breach cycles from weeks to hours. That figure is a company assertion, but the larger shift is clear. As vulnerability discovery accelerates, periodic penetration tests and annual assessments provide an increasingly incomplete view of enterprise exposure.