AI

Chrome Enterprise rolls out AI agents and automation to streamline security management

Google LLC today launched new enhancements to Chrome Enterprise, the company’s enterprise version of its Chrome browser, designed to provide greater administrative and security control to information technology teams.

With the advent of artificial intelligence agentic workflows, Google released an open-source Model Context Protocol server that connects Chrome Enterprise application programming interfaces and exposes tools that agents can call.

This means that IT teams can now speed up management automation and issue resolution by offloading repetitive tasks associated with enterprise browsers. Security teams, likewise, can call up tools faster to deploy company policies across managed and unmanaged devices.

Using the Gemini command line or other chat interfaces, IT and security workers can describe their task in plain language and AI agents handle calling the correct tools. They can converse with agents just like talking to other employees and have them review data loss policy events, suggest improvements and implement safeguards.

With the new improvements, agents can also be tasked with thorough walkthroughs of the entire organization’s security framework to see if any gaps persist and help resolve them. For example, shortcuts for complex actions such as reviews for configuration exist out of the box by typing “/cep:health,” auditing and improving rules “/cep:optimize,” or receiving expert guidance on specific questions with “/cep:expert.”

Getting ahead of data loss with Chrome Enterprise agentic tooling

One potential example facing many organizations involves credit card numbers being leaked across or outside the organization. Normally, this means writing a script or automation that would watch traffic, scan logs and crunch data for specific sets of numbers by writing a expression in the rule builder.

With the new agentic workflows, IT workers can ask the AI agent to do the work for them by explaining what they need. The agent can work through the correct expression for the rule by looking at best practices for building a content detector for credit card numbers to configure the rule, uploads the detector and attaches it to the correct triggers: file uploads, document commits, external transfers, admin warnings and the like.

Google added any time an agent generates a rule, its rules are automatically annotated with a robot emoji prefix so they can be easily distinguished from human-created policies.

This change to Chrome Enterprise continues a trend of bringing new updates to its interface layer that build on providing IT and security teams broader control of their security posture. Bringing in AI agents has changed how enterprise teams interact with systems, by allowing them to oversee autonomous systems that can act on their own with little human oversight, allowing them to save time in configuring data protection and streamlining investigation.

Image: Google