Managing agents and their actions can quickly grow in complexity and introduce security risks unique to AI. To address these challenges, at Google Cloud Next we announced Agent Gateway to provide simple, secure, and governed connectivity across all user-to-agent, agent-to-agent, and agent-to-tools interactions. 

As part of Gemini Enterprise Agent Platform, Agent Gateway provides a programmable data plane for your AI agents. It connects easily with a wide array of security providers, giving your team the flexibility to inject custom logic and third-party security controls directly into the request path.

To support the agentic enterprise in today’s multicloud and multi-AI world, we’re partnering with leading identity and AI security providers to integrate with Agent Gateway and help ensure that your security posture remains as flexible as the agents you’re building.  

• Broadcom: Agentic AI introduces high-speed, autonomous data exchanges across LLMs, tools, and other agents, dramatically expanding the risk of data exfiltration through new, unmonitored leakage points. To counter this, Symantec and Google Cloud are partnering to integrate Symantec Data Loss Prevention (DLP) scanning as a service extension for the Agent Gateway, which serves as the network-level enforcement point for all agent traffic. This integration enables real-time inspection and enforcement of existing DLP policies across agent communications — including LLM inference requests and MCP tool calls — without requiring any changes to application code. 

• Check Point: Securing your AI transformation across both employee adoption and runtime innovation, Check Point’s AI Defense Plane can discover and govern sanctioned and unsanctioned, shadow AI usage. AI Defense Plane’s runtime protections integrate with Agent Gateway to provide low-latency inspection of prompts, responses, and tool interactions — preventing agent manipulation, sensitive data leakage, and tool misuse, so organizations can confidently scale AI. 

• Cisco: Integrating Cisco AI Defense with Agent Gateway can help enforce runtime protections for every AI interaction, including those that use model context protocol (MCP). These guardrails can help mitigate threats like prompt injection and data exfiltration, and agent-specific risks like tool exploitation and misuse.

• CrowdStrike: Extending the AI-native CrowdStrike Falcon platform into the Agent Platform including Agent Gateway ecosystem can help CrowdStrike deliver guardrails, visibility, and control as agentic AI systems move from experimentation into production. Integrations including CrowdStrike Falcon AI Detection and Response (AIDR) and CrowdStrike Falcon Shield can provide secure operation of agents across the ecosystem.

• Exabeam: Delivering behavior‑driven security analytics at enterprise scale, Exabeam New‑Scale Analytics is purpose‑built to secure Google AI and Agent Platform environments. Exabeam can ingest and analyze telemetry from Agent Platform including Agent Gateway, applying behavioral analytics to identify anomalous and high‑risk AI agent activity. Together, Google provides the AI infrastructure and controls, and Exabeam delivers the enhanced behavioral intelligence, governance, and continuous security oversight required to operate AI agents safely at scale.

• F5: F5 AI Guardrails provides runtime protection for agents against data leakage, harmful outputs, and adversarial attacks. Integrated via Agent Gateway, it enforces data security and policy controls to ensure agent interactions remain governed and compliant across all models.

• Netskope: Netskope One DLP On Demand with Agent Gateway inspects data at the precise moment it moves through your AI workloads and enforces the data security policies your team has already built. By embedding DLP in their architectures, organizations can govern sensitive data generated and routed by AI agents without creating new configurations, ensuring data security evolves alongside cloud and AI innovations.

• Okta: Okta for AI Agents provides centralized identity governance and access control for Agent Gateway. With Okta as the identity layer, Google’s policy engine can defer access decisions to Okta, enabling organizations to govern which users and agents can access specific agents and tools. Agents created in Google Cloud can also be automatically registered in Okta, keeping identity and governance policies in sync.

• Palo Alto Networks: Deploying Palo Alto Networks Prisma AIRS as an AI security layer with Agent Gateway can provide the real-time security and governance necessary to oversee agentic interactions and intercept adversarial attacks on AI before they can compromise the system. This architectural integration can help ensure that as you scale your autonomous agents, every agentic action is validated against enterprise safety and security policies, providing comprehensive operational integrity without hindering the speed of innovation.

• Ping Identity: Ping Identity integrates with Agent Gateway to bring runtime identity and real-time, fine-grained authorization to agent and tool traffic. The integration with Agent Gateway ensures every request is continuously verified based on user, agent, context, and policy, rather than relying on static credentials. Together, they provide centralized, consistent governance and visibility across all agent interactions without requiring changes to application code.

• Saviynt: Saviynt provides identity security and governance that helps enterprises govern every identity — human, non-human, and AI — across cloud environments. Saviynt’s integration with Agent Gateway provides live identity intelligence for every AI agent access request, evaluating intent, data sensitivity, and organizational policy in real time before access is granted. This ensures AI agents remain purpose-bound and continuously governed, with high-risk actions surfaced for human oversight and a defensible audit trail for compliance.

• Silverfort: Silverfort provides identity security for agentic workloads by extending its patented Runtime Access Protection (RAP) to agent platforms, automatically discovering AI agents, mapping each to its human owner, and surfacing risks such as overprivileged access and stale credentials. By integrating directly with Agent Gateway, Silverfort can authenticate and authorize every agent-to-resource request at runtime, blocking unauthorized actions before they reach downstream systems.

• Thales (Imperva): Thales provides advanced web application and API security for the Agent Platform, including security for client‑to‑agent traffic leveraging Agent Gateway. Imperva for Google Cloud (IGC), currently in preview, deploys natively in Google Cloud, eliminating the need for external software-as-a-service (SaaS) integrations and avoiding traffic redirection outside of Google’s infrastructure.

• Zscaler: Providing runtime protection and governance for AI apps, models, and agents, Zscaler AI Guard can help enable real-time inspection of prompts and responses to detect malicious inputs like prompt injections and prevent sensitive data leakage through advanced content moderation and data protection detectors. The Zscaler AI Guard integration with Agent Gateway can help ensure that agentic workflows remain secure, compliant, and aligned with enterprise security policies.

As enterprises build and deploy a wide range of agents and agentic use cases, Agent Gateway supports a wide variety of agentic security controls tailored to your unique operational needs. Our approach can help your business meet compliance and governance requirements, while offering the freedom to use your choice of security provider.

To learn more about how our partners can elevate your Google Cloud experience, reach out to our team for a personalized consultation and discover the power of an open, integrated approach.