Cloudflare, Wiz link AI security tools for unified view

Cloudflare has partnered with Wiz, now part of Google Cloud, to integrate their AI security products.

The tie-up combines Cloudflare's AI Security for Apps with the Wiz Security Graph, aiming to give security teams a single view of AI-powered applications across web properties, cloud infrastructure and connected data sources.

The move reflects a growing problem for companies deploying chatbots, copilots and AI search tools across different business units. Security teams often struggle to identify every AI endpoint in use, particularly when tools are introduced without central oversight, creating what the sector calls shadow AI.

Traffic inspection

Under the integration, Cloudflare's service inspects requests to large language model endpoints for issues such as personally identifiable information leakage, prompt injection and other restricted or custom-defined topics. Wiz then maps AI applications, models and data stores into its graph-based view of cloud assets, helping teams trace where sensitive data interacts with AI systems.

The joint approach is intended to show which AI deployments are protected by Cloudflare controls and which are not. It also highlights cases where unprotected endpoints can access sensitive data or production systems, allowing security teams to prioritise remediation by risk.

Blind spots

The announcement comes as security suppliers race to address the new attack surface created by AI adoption. As companies add AI features to customer service, internal productivity software and search tools, they create more opportunities for misuse, data exposure and malicious prompts.

For chief information security officers, a central challenge is visibility. Many legacy security tools were built to monitor conventional applications and infrastructure, not AI endpoints that can be deployed quickly across multiple teams and cloud environments.

The integration does not require additional agents or custom workflows. Cloudflare's detections run inline on its network, while Wiz overlays those controls and findings onto its broader map of cloud and AI assets.

That matters for organisations trying to avoid adding more fragmented tools to already crowded security operations. A common complaint among security leaders is that they have point products for code, cloud, identity and data, but lack a coherent view of how AI applications connect those environments.

Tom Evans, Chief Partner Officer at Cloudflare, said the market was struggling to balance AI adoption with security oversight.

"AI is the most transformative technology we've seen in a generation, powering countless capabilities. But for a majority of businesses, it can be a black box. When talking with CISOs today, they are struggling with the balance of being an enabler of innovation with AI, while combating uncontrolled shadow AI across their organisation because their legacy security tools are effectively useless at this level," said Tom Evans, Chief Partner Officer, Cloudflare.

"The Cloudflare and Wiz partnership helps tackle this trade-off. Now, we are delivering a solution to allow innovation with AI at speed, without the worry that their most sensitive data will be exposed," added Evans.

Shared view

Wiz framed the deal as a way to link discovery and protection rather than treat them as separate tasks. In practice, that means identifying AI services across a company's environment, checking whether controls are in place and directing teams to the gaps that matter most.

That approach could appeal to companies whose AI projects span several cloud providers or use different model vendors. The integration is intended to work regardless of the underlying large language model or hosting platform.

Oron Noah, VP of Product, Extensibility & Partnerships at Wiz, said the partnership was intended to improve how AI risk is tracked and addressed.

"Security alignment isn't just about reducing risk, it's an enabler of AI application development," said Oron Noah, VP of Product, Extensibility & Partnerships, Wiz.

"By combining Wiz's end-to-end visibility with Cloudflare's edge protections, we close a critical gap in how AI risk is managed. This partnership gives organisations a unified view of AI application endpoints and shared risk context, helping them stop threats like prompt injection and shadow AI before they start," added Noah.

The integration centres on five practical tasks: discovering AI endpoints that may not be under formal security management, inspecting AI traffic in real time, mapping sensitive data flows, verifying whether guardrails are active and prioritising remediation for the highest-risk exposures.

For buyers, the significance lies less in any single detection feature than in bringing AI application security into existing cloud risk workflows. As companies move from AI experiments to wider deployment, that operational link is likely to shape how they manage a fast-expanding set of AI assets and the security gaps around them.