Palo Alto Networks Cortex Cloud Runtime Security provides runtime protection for cloud workloads across virtual machines, containers, Kubernetes, and serverless environments. The platform operates through a lightweight agent that monitors and blocks threats during runtime execution. The solution includes behavioral threat protection, malware analysis, and exploit prevention capabilities. It detects known and unknown threats using threat intelligence data and AI-driven analysis. The platform provides Cloud Detection and Response (CDR) functionality to prevent, detect, and respond to cloud threats. Cloud Workload Protection (CWP) capabilities extend across multicloud environments, securing VMs, containers, Kubernetes clusters, and serverless functions. Container and Kubernetes security features cover the application lifecycle from code to cloud. Web Application and API Security (WAAS) protects applications and APIs against web-based attacks in public and private cloud environments. The platform includes Code to Cloud context tracing, which helps teams identify the root cause of security issues by tracing problems from runtime back to source code. This enables remediation at the source rather than just addressing symptoms. Runtime protection blocks malicious processes, malware, and threats through continuous monitoring and analysis of workload behavior and activities in cloud environments.