AIToday
Snowflake AI BlogPublished: Aug 2, 2026, 22:01 JST

Snowflake launches AI security suite, gateway for autonomous agents

Snowflake launches AI security suite, gateway for autonomous agents

3 Key Points

  1. What happened

    Snowflake announced Cortex AI Gateway—a centralized control layer for autonomous agents that enforces identity, policy and audit across AI model access, MCP (Model Context Protocol) servers and enterprise tools. The company also transitioned multiple native security features to general availability and preview, including Agent Identity, Native AI Security Posture Management, Data Exfiltration Prevention, and Ransomware Protection via Multi-Party Approval.

  2. Why it matters

    AI security concerns have surged from 17% in 2024 to 48% in 2026 according to The Linux Foundation's 2026 State of Tech Talent Report, yet 57% of organizations face a significant capacity gap in security and risk management. Autonomous agents have expanded the enterprise attack surface by combining data access, system execution and data movement, making centralized governance and visibility critical as 97% of organizations are committed to implementing AI.

  3. What to watch

    Cortex AI Gateway's key capabilities—Wide Model Catalog (private preview), Access Governance and Sprawl Control (private preview), Observability and Tracing (private preview), and AI Cost Control (private preview)—are currently in preview. Snowflake is demonstrating the suite at Black Hat USA 2026, booth #8206, with live demonstrations of the Gateway, Agent Identity controls and automated threat scanners in the Snowflake Trust Center.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

The announcement reflects a fundamental shift in enterprise AI risk. According to The Linux Foundation's 2026 State of Tech Talent Report cited in the article, AI security concerns have climbed to 48% from 17% in 2024—a three-fold increase that underscores the maturity crisis facing organizations. The gap is stark: while 97% of organizations are committed to AI implementation, 57% lack adequate capacity in security and risk management, creating a widening vulnerability window.

Autonomous agents, now becoming the operational norm, have dramatically reshaped the attack surface. By consolidating data access, system execution and data movement into a single workflow, agents bypass the traditional perimeter-defense model. Snowflake's diagnosis—that "a patchwork of application-layer fixes and legacy monitoring tools is no longer enough"—mirrors the industry's slow recognition that security must move into the data and control planes rather than remain an external wrapper.

Cortex AI Gateway addresses this by centralizing governance of MCP (Model Context Protocol) adoption, which has become the de facto standard for connecting language models to enterprise databases and tools. The integration of Natoma, a centralized MCP gateway, into Snowflake's ecosystem provides the kind of unified policy enforcement—identity, tool-call audit, cost visibility—that fragmented deployments cannot offer. The suite's depth (100+ MCP servers, integration with third-party identity providers like Okta and 1Password) suggests Snowflake is moving beyond point solutions toward foundational infrastructure for the agent-first enterprise.

FAQ
What is Cortex AI Gateway and what does it do?
Cortex AI Gateway is a centralized control layer that governs how AI agents access models, data, MCP servers and enterprise tools. It provides control (grant, restrict and audit access from a single endpoint), visibility (capture agent tool calls in real time with audit trails), and cost management (route requests to the right model based on cost, latency and capability).
Which AI models and platforms does Cortex AI Gateway support?
The Gateway supports a wide range of models and platforms including GPT, Gemini, Claude, Grok, Mistral, GLM, and can govern both first-party tools (Snowflake CoCo and CoWork) and third-party ecosystems such as Amazon Bedrock, Azure AI Foundry, ChatGPT, Claude Code, Cursor, and custom LangChain or LlamaIndex apps.
What security features are now available or in preview?
Agent Identity (GA) provides visibility into agent activity and allows enforcement of data access policies specific to agent sessions. Restricted Session Scope (GA soon) limits what an agent can do to only task requirements. Native AI Security Posture Management (GA) scans for AI-specific risks and compliance issues. Data Exfiltration Prevention, Context-Aware Access Policies, Client-side CoCo CLI VM Sandbox and Ransomware Protection via Multi-Party Approval (GA) are in preview or recently launched.
Snowflake AI BlogRead Original Article

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Next articleBayeswatch: 2021 sci-fi story imagined AI treaty, now echoed in AI 2027