AIToday
AI Safety & AlignmentAI Business & IndustrySnowflake AI BlogPublished: Jul 30, 2026, 01:00 JST

Snowflake launches AI Gateway and security stack for autonomous agents

Snowflake launches AI Gateway and security stack for autonomous agents

3 Key Points

  1. What happened

    Snowflake announced Cortex AI Gateway at Black Hat 2026, integrating Natoma (a centralized Model Context Protocol gateway) to govern how AI agents from first-party tools and third-party platforms like Amazon Bedrock, Azure AI Foundry, ChatGPT, and Claude Code access models, data, and enterprise tools. The company also moved native security features including Agent Identity, Native AI Security Posture Management, and Ransomware Protection via Multi-Party Approval to general availability or public preview.

  2. Why it matters

    AI security concerns have surged from 17% in 2024 to 48% in 2026 according to The Linux Foundation's 2026 State of Tech Talent Report, while 97% of organizations are committed to implementing AI but 57% face a significant capacity gap in security and risk management. Autonomous agents have expanded the enterprise attack surface by combining data access, system execution, and data movement; Snowflake's announcement aims to address decentralized adoption that creates unmanaged sprawl, fractured user experiences, and security liabilities.

  3. What to watch

    Cortex AI Gateway is launching with three core capabilities: control (centralized permission management), visibility (real-time audit trails of agent actions), and cost and performance (automatic model routing based on cost and latency). Multiple features including Wide Model Catalog, Access Governance and Sprawl Control, Observability and Tracing, AI Cost Control, and Intelligent Model Routing are available in private preview. Visitors can see demonstrations at Snowflake booth #8206 at Black Hat USA 2026.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

The jump in AI security concerns—from 17% to 48% in two years—reflects a structural shift in enterprise risk. As organizations rapidly deploy autonomous agents, the attack surface has grown dramatically: agents now combine data access, system execution, and data movement into single profiles, creating what Snowflake calls a critical capacity gap between AI adoption intent (97% of organizations) and security readiness (only 43% feel equipped in security and risk management). The core problem Snowflake is addressing is decentralized sprawl: as teams connect large language models to databases and tools via standards like MCP, each connection becomes an unvetted security liability, visibility disappears, and costs spiral. Snowflake's response—embedding governance directly into the data and control planes rather than layering it on top—reflects a broader industry recognition that patchwork application-layer fixes and legacy monitoring tools are insufficient for agentic systems.

The Cortex AI Gateway's architecture aims to unify three previously fragmented concerns: tool access control (which agents can call which systems), visibility (real-time audit trails of agent actions), and cost management (automatic routing to cheaper models for simple tasks). By integrating Natoma and extending Snowflake's existing data governance framework to agent traffic, the gateway also positions Snowflake to support a multi-model, multi-platform future—enterprises can run GPT, Gemini, Claude, Grok, Mistral, GLM, and others within their own regions, addressing data residency and compliance constraints. The shift of features like Agent Identity and Ransomware Protection via Multi-Party Approval to GA signals that Snowflake views these as production-ready, while numerous capabilities remain in private preview (Intelligent Model Routing, Advanced Data Exfiltration Prevention, Context-Aware Access Policies), indicating that full production readiness across the stack is still maturing.

FAQ
What does Cortex AI Gateway do?
Cortex AI Gateway is a centralized MCP (Model Context Protocol) gateway that governs how AI agents—from both Snowflake's own tools and third-party platforms like Amazon Bedrock, Azure AI Foundry, ChatGPT, and Claude Code—access models, data, and enterprise tools. It provides control (centralized permission management), visibility (real-time audit trails of agent actions), and cost management (automatic model routing and spending limits).
Which security features are available now, and which are in preview?
Agent Identity and Ransomware Protection via Multi-Party Approval are now generally available (GA). Restricted Session Scope is coming to GA soon. Features in private preview include Wide Model Catalog, Access Governance and Sprawl Control, Observability and Tracing, AI Cost Control, Intelligent Model Routing, Context-Aware Access Policies, Advanced Data Exfiltration Prevention, and Client-side CoCo CLI VM Sandbox (currently on macOS).
Why did Snowflake make this announcement now?
AI security concerns have surged from 17% in 2024 to 48% in 2026 according to The Linux Foundation's 2026 State of Tech Talent Report. Autonomous agents have expanded the enterprise attack surface, and while 97% of organizations are committed to implementing AI, 57% face a significant capacity gap in security and risk management, making a comprehensive governance solution timely.
Snowflake AI BlogRead Original Article

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleZaatar launches AI agents that open SEO-fix pull requests on your repo