
What happened
Snowflake announced Cortex AI Gateway at Black Hat 2026, integrating Natoma (a centralized Model Context Protocol gateway) to govern how AI agents from first-party tools and third-party platforms like Amazon Bedrock, Azure AI Foundry, ChatGPT, and Claude Code access models, data, and enterprise tools. The company also moved native security features including Agent Identity, Native AI Security Posture Management, and Ransomware Protection via Multi-Party Approval to general availability or public preview.
Why it matters
AI security concerns have surged from 17% in 2024 to 48% in 2026 according to The Linux Foundation's 2026 State of Tech Talent Report, while 97% of organizations are committed to implementing AI but 57% face a significant capacity gap in security and risk management. Autonomous agents have expanded the enterprise attack surface by combining data access, system execution, and data movement; Snowflake's announcement aims to address decentralized adoption that creates unmanaged sprawl, fractured user experiences, and security liabilities.
What to watch
Cortex AI Gateway is launching with three core capabilities: control (centralized permission management), visibility (real-time audit trails of agent actions), and cost and performance (automatic model routing based on cost and latency). Multiple features including Wide Model Catalog, Access Governance and Sprawl Control, Observability and Tracing, AI Cost Control, and Intelligent Model Routing are available in private preview. Visitors can see demonstrations at Snowflake booth #8206 at Black Hat USA 2026.
Summaries like this, in your inbox every morning.
The jump in AI security concerns—from 17% to 48% in two years—reflects a structural shift in enterprise risk. As organizations rapidly deploy autonomous agents, the attack surface has grown dramatically: agents now combine data access, system execution, and data movement into single profiles, creating what Snowflake calls a critical capacity gap between AI adoption intent (97% of organizations) and security readiness (only 43% feel equipped in security and risk management). The core problem Snowflake is addressing is decentralized sprawl: as teams connect large language models to databases and tools via standards like MCP, each connection becomes an unvetted security liability, visibility disappears, and costs spiral. Snowflake's response—embedding governance directly into the data and control planes rather than layering it on top—reflects a broader industry recognition that patchwork application-layer fixes and legacy monitoring tools are insufficient for agentic systems.
The Cortex AI Gateway's architecture aims to unify three previously fragmented concerns: tool access control (which agents can call which systems), visibility (real-time audit trails of agent actions), and cost management (automatic routing to cheaper models for simple tasks). By integrating Natoma and extending Snowflake's existing data governance framework to agent traffic, the gateway also positions Snowflake to support a multi-model, multi-platform future—enterprises can run GPT, Gemini, Claude, Grok, Mistral, GLM, and others within their own regions, addressing data residency and compliance constraints. The shift of features like Agent Identity and Ransomware Protection via Multi-Party Approval to GA signals that Snowflake views these as production-ready, while numerous capabilities remain in private preview (Intelligent Model Routing, Advanced Data Exfiltration Prevention, Context-Aware Access Policies), indicating that full production readiness across the stack is still maturing.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Chunghwa Telecom president Rong-shy Lin said the shift from conversational AI to autonomous AI agents is resha…

CoreWeave fell 5% in premarket trading Friday and was on track to finish the week down 15%, after rebounding f…

Apple and Meta said they would jointly release a new open-weight AI model designed to run on high-end Macs, ai…

Investors put $38.5 billion into Asian startups in Q3, per Crunchbase data

A longtime Anthropic investor told Fortune he expects shares priced around $1.8 trillion, below the company's…

A Zenn contributor sorted AI use into three modes — AI as an assistant, AI running alongside people, and AI th…
