Helping you build and defend at machine-speed in the agentic era

As both a frontier lab and the operator of the world's most comprehensive threat intelligence network, Google occupies a unique vantage point: We see exactly how Large Language Models are engineered, and how adversaries are targeting them in the wild. Passive defense is no longer viable. Allowing rapid, ungoverned adoption of autonomous systems into traditional workflows can lead to critical security incidents.  At the Google Cloud Security Summit, we are sharing updates on how we are helping organizations build securely, secure systems, and defend at machine speed in the agentic era.  Building securely in the agentic era Agentic coding tools have dramatically accelerated software delivery, but human review can’t keep up with machine-speed commits and unvetted dependencies. Because autonomous agents are now part of the supply chain, blind trust can turn them into direct backdoors for attackers. Our approach to securing the development lifecycle builds native, real-time guardrails in the integrated development environment (IDE), unifies asset graphs across code and identity and access management (IAM,) and verifies models to weed out logic flaws before code merges. CodeMender: Frontier cyber with enterprise control As software-driven threats continue to escalate, our autonomous code-security agent CodeMender helps organizations find and fix code vulnerabilities at machine speed. It can eliminate manual triage bottlenecks while deeply embedding security in the software development lifecycle.  CodeMender works with multiple models, including Gemini 4 Argon, that can bring state-of-the-art cybersecurity capabilities. These include identifying previously-unknown vulnerabilities, and generating tested patches before they can be exploited.  Most recently, Wiz used Gemini 4 Argon along with other models to identify and help remediate core PHP vulnerabilities that affected 70% of websites. Gemini 4 Argon made a notable contribution to finding the vulnerability, developing a likely exploit path, detecting attacks, and validating the patch. Currently in preview, CodeMender delivers new capabilities for secure isolation and flexible scanning: Secure autonomous remediation: CodeMender isolates vulnerability verification and exploit simulation inside your choice of operating system-level sandbox or isolated virtual machine, and adds human-in-the-loop checks for local write and command execution helping to reduce the risks of malicious exploits and zero-day testing gone awry. Flexible scanning modes: CodeMender now allows you to scan a specific folder, entire repository, or only modified files since the last scan so you have fine grain control on how many files to scan to optimize for scanning speed and costs. Since the CodeMender preview became available in July, hundreds of customers have used CodeMender to help them find and fix vulnerabilities at machine speed. “As adversaries attack at machine speed, Google’s Fairwind Program helps us keep pace with our application security. Our early evaluation of CodeMender shows the potential to reduce vulnerability discovery time by over 95%, while keeping expert validation and remediation under human oversight,” said Ivan Fontarensky, CTO Cybersecurity Services, Thales Group. “IDC research finds that nearly 40% of enterprises add vulnerabilities faster than they can remediate them. Detection without remediation only adds to developer workloads,” said Katie Norton, research director, Cloud Security, IDC. “CodeMender solves this by pairing exploitability validation with deployable code fixes, driving the continuous, verified patching required as exploitation timelines compress.” Securing workloads everywhere When autonomous workloads transition to production, the threat landscape shifts entirely. Adversaries target your plumbing — credentials, data boundaries, and integrations that connect agents to the enterprise. Once inside, attackers exploit over-privileged credentials and unsegmented environments to move laterally across enterprise data boundaries. To eliminate these flat-trust architectures, Google Cloud delivers a unified framework of foundational security and governance controls for agents everywhere they run. Whether your agents are operating on the Gemini platform, Google Kubernetes Engine (GKE) and Cloud Run, the new Agent Compute Engine, or are coordinating across multi-cloud environments — they are bound by the same rigorous enterprise controls. To enforce our agents everywhere framework at the transaction level, we are introducing critical identity, network, and content controls: Auth Manager (Agent Identity): Centralizes credential management inside a Google-managed vault governed by IAM. Now generally available, Auth Manager automates OAuth 2.0/PKCE flows and refreshes user-delegated tokens to minimize consent fatigue and reduce credential theft. Alongside Auth Manager, Agent Identity JWT support, now in preview, issues standard OIDC tokens, allowing agents to auth

Excerpt shown under the publisher's RSS terms · 200 words · full text and figures are on the publisher's site