What happened
Snowflake announced Cortex AI Gateway, a centralized control layer for AI agents that integrates Natoma (an MCP gateway) into its ecosystem. The company also transitioned multiple AI security features to general availability and public preview, including Agent Identity, Restricted Session Scope, Native AI Security Posture Management, and Ransomware Protection via Multi-Party Approval.
Why it matters
AI security concerns have jumped from 17% in 2024 to 48% in 2026 according to The Linux Foundation's 2026 State of Tech Talent Report, while 97% of organizations are committed to implementing AI but 57% face a significant capacity gap in security and risk management. Autonomous agents have dramatically expanded the enterprise attack surface by combining data access, system execution, and data movement; Cortex AI Gateway addresses this by enforcing identity, policy, and audit at the tool-call level across first-party and third-party models and platforms.
What to watch
Cortex AI Gateway is available now as a foundation layer; several features including Wide Model Catalog, Access Governance and Sprawl Control, Observability and Tracing, AI Cost Control, Intelligent Model Routing, Context-Aware Access Policies, and Client-side CoCo CLI VM Sandbox are in private preview. Visit Snowflake booth #8206 at Black Hat USA 2026 for demonstrations.
Summaries like this, in your inbox every morning.
The announcement reflects a critical shift in enterprise AI risk perception. According to The Linux Foundation's 2026 State of Tech Talent Report cited in the body, AI security concerns have jumped from 17% in 2024 to 48% in 2026—a near-tripling that underscores growing anxiety about deploying AI agents at scale. This concern is well-founded: the body notes that while 97% of organizations are committed to implementing AI, 57% face a significant capacity gap in security and risk management. The core problem Snowflake targets is the rapid proliferation of autonomous agents using standards like MCP to connect to databases, internal tools, and SaaS environments. Without centralized governance, this creates what the body calls "unmanaged sprawl, fractured user experiences and severe security liabilities," leaving organizations vulnerable to unvetted servers, tool hijacking, and data exfiltration. By integrating Natoma—a centralized MCP gateway—into its ecosystem, Snowflake aims to place security enforcement at the tool-call level rather than relying on application-layer fixes and legacy monitoring tools, which the body suggests are no longer sufficient.
The feature roadmap emphasizes three pillars: control (centralized access management), visibility (real-time auditing of agent actions), and cost governance (automatic model routing and budget guardrails). Supporting these capabilities is a suite of native security features transitioning to production readiness, including Agent Identity (now GA), Restricted Session Scope (GA soon), and Native AI Security Posture Management (GA)—all designed to address what the body frames as the need to "build security directly into the data and control planes" rather than layering it on top. The announcement positions Cortex AI Gateway as a foundation milestone on a longer AI gateway roadmap, suggesting Snowflake views this as the first step in a broader security architecture for the "agentic enterprise."
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
