What happened
Snowflake announced Cortex AI Gateway and production-ready AI security features at Black Hat 2026, integrating Natoma (a centralized gateway enforcing identity, policy and audit at the tool-call level) to govern how autonomous agents access models, data and enterprise tools across first-party and third-party ecosystems including Amazon Bedrock, Azure AI Foundry, ChatGPT, Claude Code and Cursor.
Why it matters
AI security concerns have surged from 17% in 2024 to 48% in 2026 according to The Linux Foundation's 2026 State of Tech Talent Report, while 97% of organizations are committed to implementing AI but 57% face a significant capacity gap in security and risk management. Autonomous agents have dramatically expanded the enterprise attack surface by combining data access, system execution and data movement into a single profile, making a patchwork of application-layer fixes insufficient.
What to watch
Cortex AI Gateway's core capabilities include unified visibility into agent actions (audit trails capturing which tool was called, which system it touched, in what order and by whom), automated cost control and model routing, and governance across 100+ MCP servers; multiple features are in private preview or coming soon to general availability, including Context-Aware Access Policies, Data Exfiltration Prevention, and Client-side CoCo CLI VM Sandbox (currently on macOS).
Summaries like this, in your inbox every morning.
The surge in AI security concerns from 17% in 2024 to 48% in 2026 reflects a fundamental shift in enterprise risk perception. While the body's report data frames this as a critical gap—97% of organizations pursuing AI but 57% lacking adequate security capacity—Snowflake's announcement positions Cortex AI Gateway as infrastructure addressing a specific root cause: autonomous agents have merged data access, system execution and data movement into single profiles, expanding the attack surface in ways that legacy monitoring and application-layer fixes cannot contain. By centralizing governance at the tool-call level via Natoma integration, the gateway aims to eliminate the "unmanaged sprawl, fractured user experiences and severe security liabilities" the body identifies as current pain points.
The feature set reflects three interconnected enterprise needs. Control capabilities (fine-grained authorization, Tools by Cortex AI Gateway) tackle the fragmentation problem—administrators currently must manually configure each new agent type. Visibility features (real-time audit trails, observability and tracing in private preview) address the "no visibility into what agents are doing" problem. Cost and performance routing (unified AI consumption views, budget guardrails, intelligent model routing) acknowledge that enterprises face spiraling costs alongside the security challenge. Notably, several capabilities remain in private preview or coming "soon" to GA, suggesting Snowflake is phasing the rollout rather than releasing everything simultaneously.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
