Also Read: Tech Mahindra and Cisco Partner to Deliver AI-Driven Security Service Edge Solutions 

Contextualizing the strategic importance of building technological autonomy directly into the underlying cloud architecture, Christian Müller, CEO of Schwarz Digits, explains: “Technological independence begins with infrastructure. Through this partnership, we are taking network security to a new level: we are evolving existing security architectures and focusing on high-performance identity verification. For our customers, this means even stronger protection against cyberattacks.” Reinforcing the vendor’s long-term enterprise commitment to data sovereignty across the region, Misha Kuperman, Chief Reliability Officer at Zscaler, added: “In an era of AI-driven cyber threats, a modern Zero Trust SASE solution is the only effective way to protect sensitive enterprise data. Our partnership with Schwarz Digits is a concrete demonstration of our long-term commitment to Europe: Together, we help our customers eliminate their attack surface and prevent the lateral movement of threats, while still maintaining compliance with European regulations through EU data residency. This enables the highest level of security while aligning with European digital sovereignty regulations.”

Read More: Zscaler and Schwarz Digits Partner to Deliver Sovereign Cloud Security Platform for Europe

The post Zscaler Partners with Schwarz Digits to Deliver Sovereign Cloud Security for Europe appeared first on ITDigest.

Also Read: Orca Security Expands Cloud Security Reach with TD SYNNEX Partnership 

Underscoring the need to secure modern distributed architectures and burgeoning agentic systems, Raj Chopra, SVP & Chief Product Officer, Cisco Security Business Group, added: “Enterprises don’t need another tool to stitch into an already complex security stack. They need a simpler way to secure how work actually happens across users, devices, applications, clouds, and increasingly AI agents. Cisco Secure Access brings zero trust, identity context, and AI-powered protection into one cloud-delivered platform, helping teams enforce policy consistently while giving users seamless access from anywhere. Together with Tech Mahindra’s global managed services and integration expertise, we can help organizations modernize security operations, accelerate secure cloud and AI adoption, and move with confidence in the agentic era.” The strategic partnership expands Tech Mahindra’s managed security footprint while empowering organizations to secure complex data flows across multi-cloud environments reliably.

Read More: Tech Mahindra and Cisco Partner to Bring AI-Driven Security Service Edge to Global Enterprises

The post Tech Mahindra and Cisco Partner to Deliver AI-Driven Security Service Edge Solutions appeared first on ITDigest.

This release tackles a trend in how all software is written; albeit AI has Quite a bit shortened time-to-write and find issues, remediation cycles have not kept pace. Outdated security tools overwhelm engineering teams with business-irrelevant, false-positive results, creating risk for the organization due to existing un-patched exploits. 75% of security practitioners said shadow AI will eclipse shadow IT as a business risk, but few companies have processes in place to inventory or control AI agents.

“While the attack surface has expanded, the real crisis is no longer just discovering vulnerabilities. It is the speed at which organizations can respond to them. Modern AI systems can surface vulnerabilities far faster than security teams can triage, validate, and patch. This creates an operational bottleneck where organizations are flooded with findings but lack the capacity to remediate them, leaving them exposed despite having ‘visibility.'”

Also Read: Orca Security Expands AI Platform with Claude Compliance Integration

Unifying Application, API, and Agent Security on One Platform

Built on top of the Harness AI Software Delivery Platform, the AppSec Alliance provides system integrators, VARs, and MSPs with a complete security stack. With the help of this offering, partners can integrate, deliver, and manage the following functionalities, thus improving risk management across four key technical areas:

Shift-Left SAST & SCA: Provides AI-enabled SAST and SCA capabilities straight in CI/CD pipelines. Using reachability analysis and deduplication, this solution helps users to eliminate false positives and to prioritize high-risk and reachable risks.

Supply Chain Protection for Software & AI: Automatically creates Software Bills of Material (SBOMs) and AI Bills of Materials (AIBOMs). At the same time, it performs artifact provenance and attestation, which is needed to detect zero-day vulnerabilities fast.

Web Application & API Protection (WAAP): Integrates WAF, API discovery, bot protection, and runtime attack prevention capabilities in the native API control plane, which is tailored for the needs of microservices architecture.

AI & Autonomous Agent Security: Offers visibility into all active AI endpoints and agents, performs adversarial model testing, implements runtime firewall policies and collects session telemetry using Harness AgentTrace.

“The Harness AppSec Alliance closes that gap. We’re bringing partners application security technology, built into one platform, so they can walk into an existing account and pick up spend they were never able to compete for before.”

Solving Core Channel and Customer Bottlenecks

By integrating runtime protection, vulnerability prioritization, and automated patching into a single architecture, the AppSec Alliance resolves common operational gaps that legacy security stacks miss:

Closing Runtime Gaps: Traditional web application firewalls often miss multi-step, API-targeted agentic attack chains that unfold over time.

Eliminating Signal Overload: AI-driven triage filters out noise, replacing unmanageable alert volumes with actionable remediation paths.

Accelerating Zero-Day Audits: Replaces manual, multi-month open-source exposure audits with instantaneous cross-estate dependency mapping.

Compressing Patch Windows: Connects vulnerability identification directly to automated developer workflows, ensuring fixes are deployed before exploit windows open.

The Harness AppSec Alliance program is available immediately to qualified enterprise partners worldwide. Managed service providers, technology resellers, and security integrators can evaluate platform documentation, join the ecosystem, or request an operational demonstration by visiting the official Harness partner portal.

The post Harness Launches AppSec Alliance to Secure Application, API, and Agent Workflows appeared first on ITDigest.

This is indicative of a change in approach by companies towards the development of products, where humans working as engineers, enterprise employees, and autonomous AI systems work together within a common software space. Based on the results published in the State of AI Security Report of 2026 by Orca Security, 56% of companies surveyed have deployed their AI agents in the live production environment.

“The future of software development isn’t just human. It’s human and AI working together,” said Gil Geron, CEO and co-founder of Orca Security. “As AI becomes another builder inside the enterprise, organizations need security that understands the complete picture, not isolated tools for every new technology. Orca gives security teams the context to understand risk across cloud, applications and AI in a single platform, helping organizations securely embrace the next generation of builders.”

Also Read: JumpCloud Launches Agentic IAM on Google Cloud to Govern Autonomous AI Identities

Contextual Risk Correlation Across Enterprise Cloud Workloads

Unlike standalone security tools that monitor AI tools in isolation, Orca Security correlates Claude Enterprise activity directly with broader cloud native environments. Powered by Orca’s patented agentless platform, the integration combines real-time AI telemetry with identity, application, and runtime context. This unified approach enables security administrators to isolate high-priority exposures and accelerate incident remediation.

The integration provides enterprise IT and security leads with granular operational capabilities:

Comprehensive Claude Enterprise Inventory: Automatically catalogs users, groups, roles, permissions, projects, and security configurations across connected Claude environments.

Context-Aware Risk Identification: Flags potential security vulnerabilities and compliance misconfigurations, including excessive user privileges, unmanaged shadow identities outside SSO/SCIM frameworks, and insecure retention settings.

Unified Governance Layer: Merges AI audit logging directly into existing cloud security workflows, eliminating the need to maintain separate security platforms.

Frictionless Setup and Data Privacy Architecture

Designed for rapid deployment, the integration operates via read-only Compliance API keys within Anthropic-hosted environments. The connection requires minimal configuration and maintains strict privacy boundaries, ingesting identity settings and workspace metadata without inspecting or storing sensitive chat messages or uploaded corporate files.

The Claude Compliance API integration is available immediately for organizations utilizing both Orca Security and Claude Enterprise. Chief information security officers (CISOs), cloud security engineers, and compliance leaders can review integration blueprints, read technical documentation, and request an enterprise demonstration by visiting Orca Security’s official platform.

The post Orca Security Expands AI Platform with Claude Compliance Integration appeared first on ITDigest.

Instead, modern businesses run on an intricate, highly volatile network of remote human workers, third-party contractors, external suppliers, and autonomous software agents. According to recent global cybersecurity data, traditional perimeter-based networks fail to intercept over 75% of advanced cloud attacks, leaving corporate data assets heavily exposed to zero-day exploitation and lateral threat movement.

To eliminate this structural network friction and shield complex multi-cloud perimeters, AI-native engineering services leader Coforge announced the launch of SecureEdge2Cloud.

Built natively on the Zscaler Zero Trust Exchange platform, this next-generation, AI-powered Zero Trust security offering accelerates secure digital transformation across distributed business landscapes. For the Cybersecurity, Enterprise Cloud Solutions, and Systems Integration industry, this launch defines a new market standard—shifting network defense away from static, box-checking gating and moving it into continuous, machine-speed adaptivity.

Technical Performance: 7-Layer Zero Trust Intersected with Agentic Operations

The core architectural milestone inside the SecureEdge2Cloud framework is its transition beyond basic access control toward a completely self-optimizing security fabric. Rather than forcing corporate IT departments to manage separate security point solutions across different clouds, the platform utilizes an AI-first approach mapped across the full OSI 7 layers framework.

Also Read: IBM and Red Hat Launch Lightwell to Neutralize Open-Source AI Threat Vector

The integrated solution automates multi-vector enterprise safeguards across three primary functional areas:

Autonomous AI Application Safeguards: Following Coforge’s onboarding into the next phase of Zscaler’s Project AI-Guardian ecosystem initiative, the platform features native capabilities to secure generative AI applications, large language models, and autonomous AI agents against prompt injection and data exfiltration.

Continuous Drift Remediation via EvolveOps.AI: The architecture embeds Coforge’s proprietary EvolveOps.AI agentic operations layer. This always-on engine continuously monitors network configurations, detects security policy drift, and reconfigures enterprise control planes automatically before anomalies turn into active security breaches.

Unified Workspace Segments: The platform consolidates visibility across all managed and unmanaged (BYOD) endpoints, third-party partner portals, and private software applications—replacing brittle legacy VPN infrastructure with cryptographically secure, identity-centric Zero Trust Network Access (ZTNA).

Transforming the Cybersecurity and Systems Integration Industry

The delivery of an AI-engineered, outcome-committed Zero Trust framework by a major global systems integrator signals permanent structural transformations across the IT services landscape.

The Obsolescence of Fragmented Security Point Solutions
For the past decade, the enterprise security sector was heavily fragmented. System integrators routinely generated high billable hours by manually stitching together separate data loss prevention (DLP) tools, independent endpoint tracking agents, and disconnected cloud access security brokers (CASBs).

The SecureEdge2Cloud launch highlights the operational failure of this disjointed model. When threats move at machine speed, fragmented databases delay vital incident response times. The enterprise market is entering a rapid platform consolidation era, where systems integrators will be judged entirely by their ability to deliver unified, edge-to-cloud control panes that simplify security architectures out of the box.

Shifting Consultative Focus from Installation to Continuous Optimization
Historically, third-party IT service vendors operated as simple technical deployment plumbers charging static fees to install a vendor platform, verify basic connectivity checklist items, and hand off maintenance to internal teams.

Coforge‘s achievement of Zscaler Delivery Services Authorization (DSA) status, combined with pre-built Z-Deploy accelerators, heavily commoditizes the basic mechanics of setup. This shifts the long-term tech consulting baseline away from routine installation. System integration vendors will increasingly be forced to operate via highly agile “Mod Squad” cross-skilled pods focused entirely on continuous AI-driven optimization, advanced threat modeling, and board-ready risk reporting metrics.

Broad Operational Impact on Enterprise Businesses

For large-scale organizations operating across highly regulated verticals including Banking and Financial Services, Insurance, Healthcare, and Life Sciences deploying an adaptive Zero Trust fabric introduces distinct commercial advantages.

Insulating Corporate Treasuries from Catastrophic Data Breaches
Maintaining legacy, network-centric perimeters that grant broad access once an initial security gate is cleared leaves an enterprise wide open to devastating financial impacts. If an attacker compromises a third-party contractor’s credentials, they can freely traverse internal databases to exfiltrate proprietary source code, healthcare data, or customer financial records.

An identity-centric Zero Trust fabric ensures that every user, device, and software workflow is continuously verified and restricted strictly to authorized tasks. This shields corporate balance sheets from expensive regulatory fines, protects brand reputation, and minimizes unexpected business downtime.

Unlocking Commercial Agility and Secure AI Innovation
A major operational bottleneck for corporate innovation teams is the length of time it takes to vet and approve modern digital tools. Because security compliance officers frequently stall generative AI and cloud expansion projects due to data leak fears, businesses lose market velocity.

Deploying an integrated defense framework that wraps strict, automated security boundaries around shifting digital applications gives corporate boards the clarity needed to confidently scale operations. Enterprises can safely leverage cutting-edge AI automation, onboard global partner networks in minutes, and turn advanced data infrastructure into a powerful driver of long-term corporate growth.

The post Coforge Launches AI-Powered SecureEdge2Cloud to Neutralize Distributed AI-Era Vulnerabilities appeared first on ITDigest.

Building on Endava’s already existing certifications as a Google Cloud Premier Partner and Google Security Partner, the membership in the Wiz Partner Alliance is expected to help enterprises around the world. This global network brings together industry leaders to help companies quickly deploy solutions, have strong digital defense systems, and increase their productivity in cloud environments. With the combination of AI-based defense, multiclound architecture management, and agential AI governance, the alliance has built a framework that is safe and suitable for the modernization of corporations.

Addressing Critical Vulnerabilities in the Era of Rapid AI Deployment

In today’s world, businesses are growing very fast within their complex multi-cloud footprint, increasing the need for security policies that integrate well within the clouds, SaaS architecture, and AI architectures. This partnership ensures that Endava helps customers build robust cloud perimeter by using Wiz’s unique set of tools. The project will not only ensure transparency within the scattered cloud architecture but also provide the safety needed to run AI workloads.

Recent threat intelligence from Google Cloud underscores the urgency of the initiative, revealing that the window between an initial security breach and sequential lateral attacks has drastically compressed from eight hours down to a mere 22 seconds. As corporate attack vectors stretch far past old-school network boundaries, Endava’s integration with Wiz moves organizations away from localized, disconnected security checks and toward a continuous, predictive defense model. This methodology ensures risks are identified, ranked, and neutralized much earlier within the lifecycle of AI projects.

Also Read: JumpCloud Launches Agentic IAM on Google Cloud to Govern Autonomous AI Identities

Operational Services and Strategic Deliverables

To facilitate this transition, Endava is introducing targeted cloud security consulting and technical services, which include:

• Rapid Cloud Risk Assessments: Identifying active vulnerabilities, configuration errors, and weak entry points.
• Managed Detection and Response (MDR): Equipping enterprise teams to track, categorize, and investigate critical incoming threats.
• Architecture Advisory & Implementation: Embedding the Wiz platform natively into continuous deployment pipelines and active AI development, stopping threats prior to production rollout.

“Security is a foundational layer of the AI era,” said Nick Ross, VP of EMEA & LATAM Channels & Alliances at Wiz. “Enterprises want to innovate with AI and cloud, but they also need confidence that the services they create are secure, resilient and trusted by their customers. The valuable experience Endava brings to the Wiz Partner Alliance will help more organisations turn cloud security visibility into action across the complex, multi-cloud environments they operate every day.”

“As enterprises adopt agentic AI, autonomous agents can access data repositories, systems and permissions across interconnected environments,” said Matt Cloke, CTO at Endava. “This expanding reach is increasing pressure on organisations to rethink how they strengthen data governance, identity controls and consistent security policies across their AI ecosystems. Wiz completes a critical part of that picture by giving customers the visibility, context and risk prioritisation needed to embed security into AI and cloud programmes from the start. Combined with Endava‘s cloud engineering and managed services expertise, this partnership helps us provide organisations with a practical route to secure AI adoption across their multi-cloud environments.”

The post Endava Welcomes Wiz to Partner Alliance, Securing Enterprise AI and Multi-Cloud Environments appeared first on ITDigest.

This creates a dangerous blind spot. While security teams focus heavily on software-layer bugs or individual prompt injections, bad actors are aggressively shifting their focus down the stack. They are targeting the underlying cloud compute layers, data storage arrays, and network configurations that feed and house enterprise AI models.

Historically, cloud security posture management (CSPM) and data security operated as isolated tasks. Security teams would use one tool to audit cloud infrastructure configurations and an entirely separate platform to monitor AI training data. This disconnected approach allowed sophisticated attackers to exploit hidden, multi-cloud vulnerabilities, using compromised AI applications as a backdoor to move laterally across core enterprise systems.

Addressing this structural vulnerability, cybersecurity leader CrowdStrike announced a major expansion of Project QuiltWorks in collaboration with Amazon Web Services (AWS) at the AWS re:Inforce conference.

By embedding CrowdStrike’s Falcon protection suite directly into AWS’s scalable infrastructure, the expanded initiative establishes a unified, context-aware shield for enterprise cloud operations. For the Cloud Infrastructure, Artificial Intelligence, and Cybersecurity industries, this development marks a critical shift. It transitions data security away from isolated point solutions and introduces fully integrated, end-to-end runtime protection across the entire AI pipeline.

Also Read: Databricks Unveils Lakehouse//RT: The Critical Real-Time Layer for the Agentic AI Era

Technical Integration: Unified Defense from Chip to Application Layer

The core advancement behind the expanded Project QuiltWorks is its focus on continuous, multi-layer visibility. Rather than checking cloud environments through slow, episodic scans, the integration provides deep telemetry across AWS workloads and container clusters in real time.

Operating natively across AWS infrastructure layers, the unified framework delivers comprehensive protection across three critical areas:

Sovereign Data Fabric Protection: Continuously monitors and audits sensitive data storage arrays (such as Amazon S3 buckets) feeding AI training loops. The platform automatically flags and remediates data misconfigurations, preventing intellectual property exposure or unauthorized modifications.

Continuous Non-Human Identity Control: Uses CrowdStrike’s advanced identity verification layers to monitor autonomous AI agents and machine-to-machine integrations. The platform automatically flags and revokes access privileges the exact millisecond a digital service attempts to execute an unauthorized, lateral system command.

Inline Threat Containment: Leverages real-time AI behavioral analytics to detect active exploitation attempts within the cloud perimeter. If an adversary attempts to hijack a high-performance GPU cluster or poison an active data training pipeline, the system automatically isolates the compromised node.

Transforming the Cybersecurity and Cloud Software Industry

The rollout of deep, infrastructure-level security for frontier AI deployments reshapes standard operating procedures across the global tech vendor landscape.

The Obsolescence of Fragmented AI Security Tools
Over the past several years, a wave of niche startup vendors flooded the market with standalone AI safety tools designed to catch specific software bugs or monitor basic user chats. This collaboration highlights the structural limits of those single-feature point solutions.

Without deep visibility into the underlying cloud compute and network infrastructure, application-only security layers remain inherently blind to lower-level system takeovers. The cybersecurity market is quickly shifting toward fully integrated cloud native application protection platforms (CNAPP) that handle application data and server hardware as a single, connected entity.

Setting New Standards for Shared Cloud Governance Models
Historically, the cloud computing market operated under a strict Shared Responsibility Model: the infrastructure provider (like AWS) secured the physical hardware and baseline hypervisors, while the corporate client was entirely on their own to secure their data, identities, and custom code applications.

Project QuiltWorks redefines this relationship. By co-engineering deep, native integration pathways between AWS transport networks and CrowdStrike‘s external security fabric, the technology leaders are building a more cooperative, automated approach to enterprise cloud defense.

Broad Operational Impact on Enterprise Businesses

For corporate entities looking to scale advanced automation without introducing severe legal, compliance, or operational liabilities, hardening their cloud footprint yields distinct commercial advantages.

Insulating Enterprises Against Advanced System Poisoning
In case the malicious individual manages to gain access to the data pipelines used by a firm, they can actually poison the data fed into the training process of their core models. Through slight manipulations and tweaking of various fine-tuning parameters, an attacker could introduce hidden biases and backdoors in the firm’s customer-facing apps.

The implementation of continuous integrity monitoring at the infrastructure level guarantees that all the data being used to power AI is scrutinized and validated. This helps protect the digital core assets of the organization against any potential harm.

Accelerating Safe, Compliant Automation Scale
Organizations that must comply with stringent data handling standards, including international banks, healthcare providers, and defense contractors, cannot afford to implement any advanced AI solutions without proper governance policies.

Passing cloud-based loads via a centrally designed and engineered security infrastructure provides enterprise risk managers with constant visibility, enabling them to keep logs of each decision made by a model, each request made for the data, and each automated move by any agent. This kind of oversight empowers company boardrooms to launch large-scale automation projects and benefit from huge efficiencies while maintaining data sovereignty standards.

The post CrowdStrike and AWS Expand Project QuiltWorks to Neutralize Frontier AI Infrastructure Risks appeared first on ITDigest.

As artificial intelligence agents evolve from experimental tools into mission-critical digital employees, corporate IT and security divisions require a global infrastructure capable of managing high-velocity, machine-speed identities. By hosting Agentic IAM on Google Cloud, JumpCloud can leverage Google Cloud’s global scale to provide the world-class security required for the modern, AI-driven enterprise.

“The move to autonomous AI agents requires a foundational shift in how we think about trust and scale,” said Dwight Allgood, senior director, strategic alliances, JumpCloud. “By building our Agentic IAM infrastructure on Google Cloud and integrating with Gemini Enterprise, we are helping to ensure our customers have the most robust, low-latency, and secure environment possible. This is vital given that our research shows that 66% of organizations now grant AI agents equal or greater system access than human users, yet only 37% have fully integrated those agents into their formal IAM policies.”

Also Read: Zscaler Expands Zero Trust SASE Platform to Automate Enterprise Security Administration 

The strategic collaboration underscores JumpCloud’s commitment to the Google Cloud ecosystem. Agentic IAM is specifically tuned to work with Gemini Enterprise, providing native, first-party integration that allows Google Cloud customers to deploy autonomous workflows with complete confidence. This joint solution simplifies how organizations securely connect their digital agents to the extensive ecosystem of applications and resources available within JumpCloud’s enterprise catalog.

“With this integration, JumpCloud is expanding its use of Google Cloud’s AI and making it easier for its customers to build agents using our platform,” said Granville Valentine, Managing Director, AI Sales & GTM, North America, Google Cloud. “This collaboration simplifies how organizations securely connect their agents to the extensive ecosystem of applications and resources available within JumpCloud’s catalog.”

Core Operational Capabilities of Agentic IAM on Google Cloud

The platform deployment introduces critical capabilities designed to bring visibility, structure, and strict security boundaries to enterprise agentic systems:

• Global Scalability: By utilizing Google Cloud’s distributed infrastructure, the platform delivers real-time discovery and registration of non-human identities, providing the necessary processing speed to accommodate high-volume AI-driven traffic.

• AI Device Trust: The software’s device trust framework helps ensure the correct human operator is instigating AI-based requests within Gemini Enterprise, leveraging biometric verification alongside adjacent environmental checks to maintain strict hardware compliance.

• Unified AI Gateway: Provides a central control plane hosted on Google Cloud to monitor all agentic traffic, automatically flagging anomalous or unverified requests as they attempt to access corporate resources.

• Secure Credential Brokering: Implements standard Model Context Protocol (MCP) and Agent-to-Agent (A2A) protocol flows via OpenID Connect, allowing administrators to enforce short-lived token management controls and eliminate long-term credential risks.

JumpCloud is rolling out its Google Cloud-integrated Agentic IAM capabilities in phases throughout 2026, beginning with Managed AI Connectors and specialized AI Device Trust modules for active Gemini Enterprise sessions. Turnkey implementation documentation and enterprise registration protocols are now accessible via the main JumpCloud directory.

The post JumpCloud Launches Agentic IAM on Google Cloud to Govern Autonomous AI Identities appeared first on ITDigest.

The contemporary professional landscape increasingly relies on unmanaged hardware and complex, multi-tiered supply chains, leaving corporate networks vulnerable to highly automated, machine-speed cyber threats. Traditional SASE frameworks—frequently anchored to legacy firewall configurations and virtual private networks (VPNs) were not designed to defend these distributed perimeters. By exposing applications directly to the public internet, these legacy setups often enable lateral threat movement while creating immense administrative complexity for internal IT teams.

To combat this, the Zscaler inline security cloud now scales to monitor and protect more than 750 billion transactions every single day. This massive volume of real-time telemetry acts as a continuous training pool for the Zscaler Zero Trust Exchange architecture and its integrated machine learning engine, driving a highly adaptive and resilient Zero Trust SASE posture.

Applying Agentic AI to Streamline Daily Security Operations

The product expansion introduces the ZAgent Framework, an orchestration layer designed to unify individual platform agents and transform traditional network administration into an automated, self-managing operation.

Through the ZAgent Framework, system administrators can interact directly with the platform using simple natural language prompts within the Zscaler Experience Center, allowing teams to bypass complex scripting to deploy configurations and isolate backend system errors rapidly. A core component of this ecosystem is the Zscaler Digital Experience (ZDX) Agent. Operating under the ZAgent umbrella, it enables IT teams to instantly diagnose and resolve end-user performance issues—such as local Wi-Fi drops, ISP outages, or device lag—before they interrupt active business workflows.

“Legacy SASE was built in the post-pandemic rush, based on a firewall and VPN model for a network perimeter that no longer exists. In a world of AI with distributed users, partners, and cloud workloads, that model leaves enterprises exposed,” said Jay Chaudhry, Founder, Chairman, and CEO of Zscaler. “Security in the AI era has to be dynamic. With this expansion of Zero Trust SASE, we are giving organizations one platform that secures every communication, simplifies operations through agentic AI, without the cost and complexity of legacy infrastructure.”

Also Read: BlueVoyant Launches GenAI Security Architecture to Automate Threat Defense

Unifying Security Across Browsers, Supply Chains, and B2B Partners

The platform update rolls out a suite of endpoint and partner connectivity solutions built to protect data across highly fragmented corporate attack surfaces:

• Zero Trust Browser Extension & Enterprise Browser: Embeds Zero Trust protection into standard, cross-browser extensions or a full Chromium-based enterprise browser. The technology provides localized data controls and active Browser Detection & Response, eliminating the need for expensive Virtual Desktop Infrastructure (VDI) or legacy VPNs on personal (BYOD) and unmanaged devices.

• Zero Trust B2B Connectivity: Establishes the Zscaler B2B exchange to facilitate secure, bi-directional application access between enterprise networks and external partners. The framework removes the need for complex firewall rules, site-to-site VPNs, or costly MPLS networks, securing the supply chain without exposing core networks to external lateral movement.

• Endpoint Sandbox Capabilities: Extends Zscaler’s cloud sandboxing functionality directly to local hardware, protecting enterprise users from malicious files introduced via offline vectors such as flash drives.

“Security teams are spending too much time stitching together fragmented tools and reacting to misconfigurations they should never have to see,” said Adam Geller, Chief Product Officer at Zscaler. “By embedding our ZAgent Framework into Zscaler’s platform, we are making SASE management largely autonomous–with root cause analysis, drift detection, policy validation all happening via agents in the platform. Combined with browser-based access and PQC readiness, this gives organizations a foundation that can scale with their AI initiatives.”

Extending Microsegmentation and Multi-Cloud Protections

Beyond endpoint and user security, the update extends uniform SASE policy enforcement to multi-cloud environments, officially introducing the Zero Trust Gateway for GCP. This release matches existing AWS integrations, providing consistent security policies for workload-to-workload and workload-to-internet data streams while eliminating siloed, cloud-specific firewalls.

Concurrently, the platform delivers Microsegmentation for Kubernetes. The technology automates granular security boundaries within Google Kubernetes Engine (GKE) and adjacent container frameworks, stopping lateral threat migration between virtual machines and microservices without requiring manual code changes or interrupting live operational infrastructure.

“The SASE market is undergoing a fundamental shift as organizations realize that legacy network security approaches cannot keep pace with the scale of the AI era,” said John Grady, Principal Analyst at Omdia. “Today’s modern, AI-driven enterprise needs Zero Trust protections across everything from unmanaged devices and B2B partners to multi-cloud workloads. Zscaler’s introduction of the ZAgent agentic AI framework goes beyond basic automation and redefines how enterprises can manage and scale security across all these areas, within a single, unified architecture.”

“As we accelerate our AI initiatives, data security and operational agility are our top priorities,” said Brad Skibitzki, CISO, Zebra Technologies. “Legacy VPN and firewall models have failed to provide the granular control and visibility required for a distributed workforce and multi-cloud environment. Zscaler’s Zero Trust SASE platform gives us the confidence to innovate rapidly. By leveraging the ZAgent Framework and the new Zero Trust Browser, we can secure every connection, whether it involves employee BYOD devices or cloud workloads, all while dramatically simplifying our security management.”

The expanded Zero Trust SASE capabilities and the ZAgent Framework are fully integrated into the cloud-native Zscaler ecosystem, providing scaling enterprises with a data-driven, unified security architecture optimized for modern cloud operations.

The post Zscaler Expands Zero Trust SASE Platform to Automate Enterprise Security Administration appeared first on ITDigest.

Leading the round is Brightmind Partners, a firm co-founded by Stephen Ward, former CISO at The Home Depot and TIAA. Previously, he served as a Managing Director at Insight Partners, where he led cybersecurity investments. Datadog joins as a strategic investor, deepening its commitment to reducing security complexity across the full cloud risk lifecycle from prevention to remediation.

“Having served as CISO for some of the world’s largest enterprises, I’m seeing firsthand how AI is increasing cloud complexity while also enabling attackers to exploit gaps faster than ever before,” said Ward. “In this post-Mythos world, the traditional ‘detect and remediate’ model is no longer enough. Instead of allowing security gaps to reach production only to be remediated weeks or months later, organizations need an enforcement layer that prevents risks from going live in the first place. After working closely with Ron, Ariel, and Yair over the past year, my conviction in Aryon’s vision has only strengthened.”

“AI and rapid infrastructure changes are introducing risk to cloud security in a way that we have never seen before – and faster than reactive remediation efforts can effectively manage,” said Bharat Sajnani, Head of Datadog Ventures. “Aryon’s preventive approach complements how Datadog already helps customers detect and resolve risks in production so that they can ship with control and confidence. We’re proud to support the Aryon team and all the important work they are doing.”

Also Read: Upwind Unveils Unified AI Protection for Cloud Environments, Setting a New Standard in Cloud Security

As AI accelerates infrastructure changes and cloud complexity, security teams are struggling to keep pace with the speed at which risks are introduced into cloud environments. By the time most cloud risks are detected, they are already live in production, forcing organizations into a constant cycle of remediation. Aryon’s platform enables organizations to enforce security policies before risks reach production, applying consistent controls across the entire cloud infrastructure. This preventive approach helps enterprises avoid up to 95% of traditional CSPM alerts while dramatically reducing risk and operational overhead.

“We built Aryon because cloud security needs to move from ‘know misconfigurations’ to ‘NO misconfigurations’,” said Ron Arbel, CEO and co-founder of Aryon Security. “Infrastructure is changing faster than security teams can manually keep up with, and enterprises can no longer afford to discover risks only after they are already in production. Aryon makes prevention operational, scalable, and safe for the world’s most complex cloud environments.”

Since emerging from stealth in 2025, the company has gained traction among mid-to-large enterprises operating complex cloud environments across highly regulated industries, including healthcare, banking, insurance, telecommunications, shipping, and the industrial sector.

Aryon’s platform is driving impact across three primary use cases. First, organizations undergoing cloud migration or M&A processes leverage Aryon’s preventive approach to ensure their environments are secure by design, allowing them to scale into the cloud without accumulating large volumes of misconfigurations that later require remediation. Second, enterprises with mature and complex cloud environments use Aryon to dramatically improve efficiency by preventing up to 95% of new security gaps from any source, from “ClickOps” to pipelines, allowing teams to shift their focus from constant firefighting to addressing existing issues. Finally, a growing number of organizations have come to realize that prevention is the only scalable approach to cloud security. Aryon enables them to operationalize this mindset, enforcing policies at scale in a way that is safe for production, granular, and natively integrated with exception management processes.

“The best companies don’t just improve a category, they redefine it,” said Robert Herjavec, entrepreneur, cybersecurity investor, and Shark Tank star. “Cloud security can no longer rely on finding issues after they happen. Aryon is redefining cloud security by moving enterprises from detecting risks after the fact to preventing them at the source.”

Aryon was founded by a team of “Forbes 30 Under 30” honorees and veterans of “Matzov,” the IDF’s elite cybersecurity unit. CEO Ron Arbel, CTO Ariel Litmanovich, and CPO Yair Ladizhensky built the company on insights gained while securing Project Nimbus, Israel’s $7.2 billion national cloud infrastructure contract. Having designed systems to protect the most sensitive environments in the world, the founders identified a fundamental gap between an organization’s cloud security desired posture and its real-world enforcement.

“As an early investor in Aryon, and now with this new investment, I strongly believe in this team and support their journey to transform cloud security, from know misconfigurations to no misconfigurations,” said Shlomo Kramer, a strategic advisor for Skinos Ventures.

Aryon’s long-term vision is to extend preventive enforcement beyond cloud infrastructure to the broader enterprise environment. As organizations adopt more AI systems, SaaS applications, and distributed technologies, the company believes the core challenge remains the same: policies are defined, but not consistently enforced. Aryon aims to help organizations consistently enforce security controls across environments before risks reach production.

Source: BusinessWire

The post Aryon Security Raises $29 Million in Series A Funding to Bring Preventive Enforcement to Modern Cloud Security appeared first on ITDigest.