Reports
AI-generated structured vendor updates
CrowdStrike's Continuous Identity for AI Agents: Real-Time Risk Engine Replaces Static Policies
CrowdStrike launches Continuous Identity for AI Agents, assigning cryptographically verifiable identities via SPIFFE and authorizing every agent action based on owner, caller, and device risk in real time. It eliminates standing privileges, integrates with Falcon AIDR for permission misuse detection, and extends the identity security control plane across human, non-human, and AI identities.
Cisco Security Portfolio Moves to AWS Marketplace: Ecosystem Lock-in Accelerates, Multi-Cloud Neutrality Questioned
Cisco announces availability of its full SaaS security portfolio (Duo, Secure Access, Identity Intelligence, Hybrid Mesh Firewall) on AWS Marketplace, with deep integration with Amazon Bedrock and SageMaker for AI security and zero-trust agent management. This move simplifies procurement and accelerates deployment but deepens AWS dependency, potentially sacrificing multi-cloud flexibility.
CrowdStrike Announces Continuous Identity for AI Agents
...
Cloudflare Absorbs Ensemble AI: Architectural Model Compression Reshapes Edge Inference Economics
Cloudflare integrates key Ensemble AI talent, bringing NdLinear and NdLinear-LoRA—architectural model compression techniques that preserve multidimensional activations to reduce parameters and compute. This aims to slash inference costs on Workers AI, boost GPU utilization, and accelerate global edge AI deployment.
Cloudflare as Customer Zero: Layered Defense Architecture Against Frontier AI Threats
Cloudflare reveals its production defense architecture against frontier AI models, using itself as customer zero. Combines WAF Attack Score, API Shield, Bot Management, Zero Trust, and MCP Server Portal. Core insight: architecture around the vulnerability matters more than patch speed, using ML scoring and positive security models to block attack variants before they hit, and contain lateral movement after a breach.
Cloudflare AI Gateway Adds Identity-Driven Budgets, Seizing AI Traffic Control
Cloudflare launches spend limits and identity-driven budgets (closed beta) in AI Gateway, integrating with Cloudflare Access. It enables per-user, per-team dollar budgets with fallback routing, shifting AI cost governance from model providers to the gateway control plane.
Cisco Silicon One Expands to Campus: Chip-Embedded Control Locks Agentic AI Networks
Cisco extends Silicon One to campus with C9550/C9350 switches and Cloud Control, embedding distributed visibility, sustained high throughput, and adaptive programmability directly into the silicon. Deep on-chip buffering, identity-aware forwarding, and sub-second policy updates shift control from perimeter devices to chip and cloud-native orchestration, targeting agentic AI workloads.
Cisco Agent Gateway: Zero Trust Evolves from Access to Action Control for AI Agents
Cisco launches Agent Gateway for Secure Access, extending Zero Trust from access control to action-level control for AI agents. Using Duo for agent identity, it enforces policies across LLMs, MCP servers, and SaaS APIs, with server-side credential injection and unified audit—addressing the unique security challenges of autonomous agent workflows.
Microsoft Build 2026: Unifying Agent Stack from Chip to Cloud
At Build 2026, Microsoft unveiled a comprehensive agent-era platform: Project Solara (chip-to-cloud), Microsoft IQ (unified grounding), Rayfin (backend generation), Azure HorizonDB, and GPU-accelerated analytics. The goal is to lock developers into Microsoft's ecosystem.
Cisco Shifts AI Network Control from K8s Black Box to Unified Fabric via Isovalent and VXLAN ESG
Cisco integrates Isovalent's eBPF into Nexus One for pod-to-fabric visibility and introduces VXLAN ESG-based AI job segmentation, embedding security and multi-tenancy into the network fabric. This targets the Kubernetes 'black box' bottleneck in AI inference, unifying control and troubleshooting.
Cisco AI Defense Update: Agent Supply Chain Security as Platform Lock-In
Cisco updates AI Defense for agent security with adaptive red teaming, Policy Studio, and automated agent dependency graph scanning. It claims platform-agnostic protection across AWS Bedrock, Google ADK, LangChain, but deeply ties into Cisco Secure AI Factory with NVIDIA, raising concerns about lock-in and runtime overhead.
Cisco Locks Security Pipeline: Splunk as Central Hub for Firewall and Runtime Telemetry
Cisco integrates Splunk with Cisco Secure Firewall advanced logging and Isovalent Enterprise Platform (eBPF-based Kubernetes runtime visibility), delivering pre-built detections and correlation. This move aims to transform fragmented security telemetry into high-confidence threat signals, deepening lock-in to Cisco's security platform.
Cisco Talos Threat Hunting Expands Across Endpoint, Network, and Identity Domains
Cisco Talos expands threat hunting to network (Cisco Firewall) and identity (Cisco Duo) domains, using an AI-driven engine for hypothesis-based searches. Findings are delivered via Cisco Security Cloud Control, targeting stealthy threats that evade alert-based detection.
Google AlloyDB Remote MCP Server GA: Standardizing AI Agent Data Access with Open Protocol
Google Cloud announces GA of AlloyDB Remote MCP Server, enabling AI agents to securely access operational data via HTTP endpoints. Built on open MCP protocol, it offers IAM fine-grained authorization, Model Armor protection, and audit logging, integrated with AlloyDB’s ScaNN vector index (10B+ vectors, 6x speed) and AI functions, positioning AlloyDB as the single source of truth for enterprise agentic workloads.
Cisco & Microsoft Join Forces: Browser Becomes Zero Trust Control Plane with SSE-Edge Integration
Cisco Secure Access integrates deeply with Microsoft Edge for Business, embedding zero-trust access, DLP, and AI threat protection directly into the browser. The browser replaces VPN/agent as the primary entry point for private apps, with unified policy enforcement that also governs AI agents like Copilot, signaling a control plane shift from network to browser layer.
Zscaler Acquires Symmetry: AI Agent Identity Becomes New Security Control Plane
Zscaler acquires Symmetry Systems to integrate Access Graph into Zero Trust Exchange, targeting AI Agent identity blind spots. Provides NHI visibility, least privilege, data lineage tracking, real-time anomaly detection, and blast radius analysis. Signals security control plane shift from network perimeter to Agent identity.
Google Cloud I/O '26: A2A Protocol and Managed Agents API Shift Agent Control Plane
At Google I/O '26, Google Cloud unveiled a unified agent development toolkit featuring Antigravity 2.0, Managed Agents API, ADK 2.0, and the A2A protocol. The platform evolves Vertex AI into Gemini Enterprise Agent Platform, offering a four-rung ladder from low-code to code-first. It aims to bridge local prototyping and secure cloud deployment via a shared protocol layer, but effectively centralizes agent lifecycle control onto Google Cloud's managed plane.
Google Cloud Managed MCP Server Shifts AI Data Layer Control from SQL to Standardized Protocol
Google Cloud introduces Managed MCP Tools, standardizing AI-to-data interaction via the Model Context Protocol. The blog outlines five scenarios from static APIs to MCP agents, highlighting MCP as an open standard that decouples reasoning from data access, though the managed implementation tightly couples to BigQuery.
AWS Releases Managed MCP Server for Secure AI Agent Access to AWS APIs
AWS announced the general availability of its managed Model Context Protocol (MCP) server, providing authenticated and secure access to AWS services for AI coding agents like Claude Code and Kiro. The server offers a fixed set of tools to call AWS APIs, retrieve real-time documentation, and introduces sandboxed script execution and curated 'Skills' to address production challenges such as outdated knowledge and overly broad IAM policies generated by agents.
HPE's Autonomous Network Agentic Mesh: Locking Ops Control via AI Agents
HPE announces 'self-driving network' capabilities, powered by a microservices, autonomous agents, and an advanced agentic mesh, integrated into HPE Mist and HPE Aruba Central. Claiming industry-first fully autonomous, agentic AIOps networking, it detects, diagnoses, and resolves issues in real-time without human intervention. UK Ministry of Justice cites ~75% fewer helpdesk tickets.