Top cybersecurity products showcased at RSA 2025

AI appeared to be the theme of the show at RSA 2025. From security automation to advanced threat intelligence, nearly every major cybersecurity vendor showcased how they’re integrating AI to stay ahead of evolving cyber threats. These veterans are rethinking everything — from identity protection to incident response — through the lens of AI, aiming to boost speed, accuracy, and resilience across security workflows.

Here’s a roundup of what cybersecurity firms had on display at the world’s largest cybersecurity event this year.

Palo Alto Networks: Prisma AIRS

Palo Alto Networks made headlines at RSA 2025 with its acquisition of Protect AI, a Seattle-based startup specializing in AI-driven security solutions. This acquisition enhances Palo Alto’s Prisma AIRS platform — also launched at RSA 2025 — integrating advanced AI capabilities to bolster threat detection and response. Additionally, the company unveiled Cortex XSIAM 3.0, the latest version of its security operation center (SOC) platform.

Cisco: Foundational AI Security Model

Cisco introduced its Foundation AI Security Model, an open-source framework designed to standardize safety protocols across AI models and applications. This initiative aims to address the growing concerns around AI security and ensure Safer AI deployments. Cisco also unveiled new agentic AI features in its XDR and Splunk platforms, along with Instant Attack Verification for automated threat response.

ServiceNow: AI-Powered Security Operations

ServiceNow showcased its AI-powered Security Operations solutions, which facilitate real-time collaboration and automated responses with the help of AI agents. These tools aim to improve incident response times and efficiency. The company also announced a “deepened” partnership with Cisco, combining Cisco’s infrastructure and security platforms with ServiceNow’s AI-driven solutions to support AI adoption for enterprises.

CrowdStrike: Falcon Privileged Access

CrowdStrike made Falcon Privileged Access generally available to customers as an addition to its Falcon Identity Protection suite. The module is expected to boost Falcon’s ability to secure identity-related risks across hybrid environments. The system will bring automation upgrades to Charlotte AI and Falcon SIEM to accelerate responses to identity attacks.

Check Point: Smart Cyber Defense and Threat Intelligence Platform

At RSA 2025, Check Point announced joining forces with Illumio to strengthen Zero Trust adoption. The collaboration aims to combine CheckPoint’s threat prevention technologies with Illumio’s microsegmentation and breach containment capabilities, offering organizations a unified approach. With this integration, the two companies are looking to help enterprises minimize attack surface and contain threats more effectively, before much damage is done.

Armis: Centrix Upgrades

Armis showcased advancements in cyber exposure management with updates to its Centrix platform, designed to offer real-time visibility and control across the full attack surface. Aimed at helping security teams stay ahead of threats, the platform enables proactive risk reduction through automated insights. Alongside this, Armis launched its Vulnerability Intelligence Database, a new tool aimed at helping organizations identify and prioritize security gaps before they can be exploited.

Sentinel One: Purple AI Athena

SentinelOne unveiled Purple AI Athena, an advanced AI capable of autonomously conducting full investigations and executing multi-step responses. This new addition to the Purple AI suite aims to replicate the decision-making abilities of seasoned SOC analysts, enhancing efficiency and reducing response times by automating threat remediation processes.

Darktrace: Cyber AI for critical infrastructure

Darktrace unveiled enhancements to its Cyber AI Analyst, introducing new AI models designed to advance threat investigation. Trained on real-world SOC data, the updated system is expected to deliver faster, more accurate investigations, reducing analyst workload while improving incident response. Claiming over 90 million investigations in 2024, the platform continues to evolve as a core component of Darktrace’s autonomous defense strategy.

Huntress: ITDR expansion and new SIEM

Huntress unveiled major updates to its cybersecurity offerings, including enhancements to its Managed Identity Threat Detection and Response (ITDR) solution and a fully managed SIEM platform. The ITDR enhancements include “Unwanted Access” for detecting suspicious login behavior, “Shadow Workflows” to monitor for malicious email inbox rules, along with support for identifying malicious OAuth applications. Additionally, Huntress introduced a fully managed SIEM solution with over 20 new integrations, providing comprehensive visibility and streamlined compliance capabilities.

Abnormal AI: AI agents

Abnormal AI introduced two autonomous AI agents aimed at streamlining employee security awareness training. The AI Phishing Coach offers personalized, interactive training sessions, replacing generic modules with tailored experiences to better engage employees. Complementing this, the AI Data Analyst aims to transform complex security data into actionable intelligence, enabling security teams to swiftly identify and address potential threats.

Fortinet: Enhancements to FortiAI

Fortinet announced significant enhancements to its FortiAI platform, integrating advanced AI capabilities across its Security Fabric to bolster protection against emerging threats and streamline security operations. The updated FortiAI now encompasses Fortinet’s comprehensive AI-driven approach, delivering intelligent, autonomous functionalities to stop advanced threats, simplify operations, and support secure AI adoption.

Akamai: Firewall for AI

Akamai introduced its Firewall for AI, a security solution designed to protect large language models (LLMs) and AI-driven applications from emerging threats. This firewall offers advanced threat protection against attacks such as prompt injection, data exfiltration, and the generation of harmful outputs. By integrating into hybrid environments, Akamai’s Firewall for AI aims to provide organizations with robust defenses for their AI applications, ensuring secure and reliable operations.