What is the primary purpose of Prisma Cloud Code Security?

Prisma Cloud Code Security (formerly Bridgecrew) performs static analysis on infrastructure-as-code (IaC) templates such as Terraform, CloudFormation, and Kubernetes manifests to identify misconfigurations at the code level. By shifting security left into the development and CI/CD pipeline phases, it prevents misconfigurations from ever reaching the cloud where they would generate alerts or incidents. This pre-deployment detection is the core design principle of the product.

While custom policies can be created, the primary purpose is proactive misconfiguration detection in IaC, not providing a general platform for application-level custom policies.

Prisma Cloud Code Security does not analyze application runtime performance; it focuses on infrastructure configuration correctness.

Real-time alert triage during deployment is a function of Prisma Cloud's CSPM and runtime modules, not Code Security, which operates earlier in the pipeline.