As both a frontier lab and the operator of the world’s most comprehensive threat intelligence network, Google occupies a unique vantage point: We see exactly how Large Language Models are engineered, and how adversaries are targeting them in the wild.
Passive defense is no longer viable. Allowing rapid, ungoverned adoption of autonomous systems into traditional workflows can lead to critical security incidents.
At the Google Cloud Security Summit, we are sharing updates on how we are helping organizations build securely, secure systems, and defend at machine speed in the agentic era.
Building securely in the agentic era
Agentic coding tools have dramatically accelerated software delivery, but human review can’t keep up with machine-speed commits and unvetted dependencies. Because autonomous agents are now part of the supply chain, blind trust can turn them into direct backdoors for attackers.
Our approach to securing the development lifecycle builds native, real-time guardrails in the integrated development environment (IDE), unifies asset graphs across code and identity and access management (IAM,) and verifies models to weed out logic flaws before code merges.
CodeMender: Frontier cyber with enterprise control
As software-driven threats continue to escalate, our autonomous code-security agent CodeMender helps organizations find and fix code vulnerabilities at machine speed. It can eliminate manual triage bottlenecks while deeply embedding security in the software development lifecycle.
CodeMender works with multiple models, including Gemini 4 Argon, that can bring state-of-the-art cybersecurity capabilities. These include identifying previously-unknown vulnerabilities, and generating tested patches before they can be exploited.
Most recently, Wiz used Gemini 4 Argon along with other models to identify and help remediate core PHP vulnerabilities that affected 70% of websites. Gemini 4 Argon made a notable contribution to finding the vulnerability, developing a likely exploit path, detecting attacks, and validating the patch.
Currently in preview, CodeMender delivers new capabilities for secure isolation and flexible scanning:
-
Secure autonomous remediation: CodeMender isolates vulnerability verification and exploit simulation inside your choice of operating system-level sandbox or isolated virtual machine, and adds human-in-the-loop checks for local write and command execution helping to reduce the risks of malicious exploits and zero-day testing gone awry.
-
Flexible scanning modes: CodeMender now allows you to scan a specific folder, entire repository, or only modified files since the last scan so you have fine grain control on how many files to scan to optimize for scanning speed and costs.
Since the CodeMender preview became available in July, hundreds of customers have used CodeMender to help them find and fix vulnerabilities at machine speed.
“As adversaries attack at machine speed, Google’s Fairwind Program helps us keep pace with our application security. Our early evaluation of CodeMender shows the potential to reduce vulnerability discovery time by over 95%, while keeping expert validation and remediation under human oversight,” said Ivan Fontarensky, CTO Cybersecurity Services, Thales Group.
“IDC research finds that nearly 40% of enterprises add vulnerabilities faster than they can remediate them. Detection without remediation only adds to developer workloads,” said Katie Norton, research director, Cloud Security, IDC. “CodeMender solves this by pairing exploitability validation with deployable code fixes, driving the continuous, verified patching required as exploitation timelines compress.”
Securing workloads everywhere
When autonomous workloads transition to production, the threat landscape shifts entirely. Adversaries target your plumbing — credentials, data boundaries, and integrations that connect agents to the enterprise. Once inside, attackers exploit over-privileged credentials and unsegmented environments to move laterally across enterprise data boundaries.
To eliminate these flat-trust architectures, Google Cloud delivers a unified framework of foundational security and governance controls for agents everywhere they run. Whether your agents are operating on the Gemini platform, Google Kubernetes Engine (GKE) and Cloud Run, the new Agent Compute Engine, or are coordinating across multi-cloud environments — they are bound by the same rigorous enterprise controls.
To enforce our agents everywhere framework at the transaction level, we are introducing critical identity, network, and content controls:
-
Auth Manager (Agent Identity): Centralizes credential management inside a Google-managed vault governed by IAM. Now generally available, Auth Manager automates OAuth 2.0/PKCE flows and refreshes user-delegated tokens to minimize consent fatigue and reduce credential theft. Alongside Auth Manager, Agent Identity JWT support, now in preview, issues standard OIDC tokens, allowing agents to authenticate securely across AWS, Azure, on-premises backends, and MCP servers without static, long-lived API keys.
-
Identity-based VPC Service Controls: Reinforcing perimeter defenses against data exfiltration, VPC-SC ingress and egress rules now support IAM roles, generally available, and Workload Identity Federation for GKE, in preview, enabling security teams to enforce granular, identity-based perimeter boundaries across enterprise GKE clusters without complex, manual exceptions.
-
Model Armor custom topic detector: This new enhancement, available in preview, enables you to enforce topic adherence for agents. You can define custom prompt-based rules to identify on-topic and off-topic interactions. Tailored for industry use cases in healthcare, insurance, and retail, it keeps your agent conversations focused, compliant, and secure.
-
Advanced network threat protection: Building on Cloud NGFW Enterprise’ IPS capabilities, you can now protect workloads with the new Cloud NGFW advanced malware sandbox, generally available, enabled by Palo Alto Networks WildFire, streamline firewall operations using Cloud NGFW project-level resources, generally available, and automate exploit protection with Cloud Armor managed rules, available in preview, backed by Thales Imperva’s global threat intelligence that scans 1.5 trillion monthly web requests.
Defending at machine-speed
Attackers are integrating advanced capabilities across their operational lifecycles to achieve unprecedented scale and velocity. To defeat autonomous, multi-agent threats, we must empower defenders with agentic, intelligence-driven operations to neutralize adversaries in minutes, not days.
Modern SOCs require autonomous investigation, detection, and response powered by planetary-scale infrastructure:
-
Continuous monitoring catches live compromises at the workload layer and feeds telemetry directly into the Wiz Security Graph.
-
Google Threat Intelligence telemetry is codified directly into the runtime logic of defensive models, triggering automated agentic threat hunts that reconstruct process trees and isolate threats in real time.
-
Autonomous agents analyze complex alerts, run correlation queries across multi-vendor telemetry in sub-second timeframes, and present clear mitigation actions for strategic human sign-off.
Of course, deploying autonomous technology is only half the battle; teams also need the right operational frameworks to wield it effectively. To help you evolve your cyber defense operations, Mandiant Transformation Services experts can modernize your operating models to maximize the benefits of these advanced technologies. By refining processes and workforce skills with frontline best practices, Mandiant enables your organization to proactively mitigate threats and ensure business continuity during a breach.
Better together: Wiz and Google Cloud
Delivering end-to-end defense requires extending these native platform controls into multi-cloud environments where organizations run diverse tooling.
Together, Wiz and Google Cloud are combining deep autonomous application understanding, connected security context, and threat intelligence to help organizations innovate securely and stay ahead of emerging threats. Recent highlights include:
-
Securing autonomous workloads wherever you build and run with Wiz: As organizations build and scale with Google Cloud and Gemini platform, Wiz protects autonomous applications across their entire lifecycle from code to runtime. Wiz discovers and maps autonomous applications, agents, and infrastructure, deeply analyzing the application itself, including its purpose, capabilities, and permissions, to uncover hidden risks. Combined with the context of the Wiz Security Graph, this surfaces complex attack paths and runtime threats, empowering teams to prioritize risk and innovate with confidence.
-
Securing code at machine speed with Wiz AI SAST: Now in preview, Wiz AI Static Application Security Testing (SAST) uses agentic reasoning to understand how an application behaves and surface complex business logic flaws. Grounded in Wiz Research and powered by our proprietary Atlas harness, Wiz AI SAST correlates code weaknesses with infrastructure context on the Wiz Security Graph so teams can prioritize the risks that matter most. Exploitable attack paths can then be remediated at machine speed using our Green Agent and CodeMender.
-
Strengthening threat defense together with Wiz plus Google Security Operations: Wiz Defend and Google Security Operations now work from a shared data model, giving security operations teams the flexibility to investigate threats in either platform. Improvements include a dedicated Wiz Content Pack in Google Security Operations, Wiz Blue Agent investigation analysis in Google Security Operations, and bi-directional syncing between the platforms for a streamlined analyst experience. Additionally, Wiz Defend now integrates with Google Threat Intelligence, bringing the latest insights and frontline intelligence directly into Wiz.
-
Protecting under-resourced organizations with Scan for Good: A joint initiative launched by Google DeepMind and Wiz, Scan for Good brings the power of autonomous technology coupled with human security researchers to under-resourced organizations, including public services, critical infrastructure, and non-profits. In its first month, this initiative has used Argon to help more than 50 public service organizations and critical infrastructure providers find and remediate critical exposures.
Turning the advantage back to the builders and defenders
Securing the agentic era requires evolving operational models, enforcing secure-by-design pipelines, and taking direct action against malicious infrastructure. At Google, our responsibility extends to disrupting adversaries at the source:
-
Tracking bad actors targeting Google Cloud environments and permanently disabling their infrastructure.
-
Engineering specialized defensive architectures with Google DeepMind, including models trained specifically for high-stakes cybersecurity and automated code analysis.
-
Feeding frontline threat intelligence back into model alignment and classifier training to neutralize emerging attack vectors before they materialize.
By establishing native pipeline defenses, dismantling flat trust architectures, and deploying machine-speed operations, enterprises can turn the AI advantage back to defenders.
Join us at the Google Cloud Security Summit to explore these capabilities and learn how to secure your organization in the agentic era.