Google LLC today announced a wave of artificial intelligence-driven capabilities coming to enterprise security, including a new service called Google Unified Security, new security agents and innovations.

Leading the announcements from the Google Cloud Next conference this week in Las Vegas is the introduction of Google Unified Security, a new AI-powered platform that consolidates the company’s current security offerings into a single, integrated experience. The new service is designed to address the complexity and fragmentation of enterprise security environments by bringing together threat intelligence, security operations, cloud security and secure enterprise browsing into one service.

Unified Security has been built to help organizations move from reactive to proactive security postures. The service automatically enriches security telemetry with the latest Google Threat Intelligence to deliver faster threat prioritization and smarter response.

The service also integrates Chrome Enterprise telemetry and Security Command Center insights to allow analysts to assess and reduce risk across every layer of the stack, including AI workloads. Playing a key role, Gemini, Google’s generative AI, assists by streamlining investigations, automating response workflows and eliminating operational silos.

The unified approach taken by the platform simplifies toolsets and accelerates decision-making. Browser behavior is now integrated directly into detection workflows, while threat actor simulations test defenses in real time. The capabilities give security teams the ability to pinpoint exposures, validate protections and improve resilience before threats materialize.

In testing, companies such as Charles Schwab Corp. report faster response times and better visibility across their environments.

“Automated response capabilities have dramatically reduced our investigation resolution time while providing a high degree of visibility and scale across our entire computing environment,” said Bashar Abouseido, chief information security officer at Charles Schwab. “The platform has empowered our team to focus on strategic initiatives and high-value work.”

Security agents

Google is also advancing its vision of agentic AI with the introduction of new “Gemini in Security” agents, designed to work alongside human analysts to accelerate investigations and reduce operational burden.

In Google Security Operations, an alert triage agent that can perform dynamic investigations on behalf of users will be previewed in the second quarter. The agent performs dynamic investigations by analyzing alert context, gathering relevant data and delivering a verdict, complete with evidence and rationale. The always-on agent is aimed at reducing the repetitive workload of Tier 1 and Tier 2 analysts, who often triage hundreds of alerts daily.

Google Threat Intelligence is also getting a malware analysis agent that can assess suspicious code, including executing deobfuscation routines and summarizing its findings.

The agentic AI offerings aim to deliver faster detection and response with complete visibility and streamlined workflows. In Google’s own words, “they represent a catalyst for security teams to reduce toil, build true cyber-resilience and drive strategic program transformation.”

Security operations

On the security operations front, Google has introduced new data pipeline management capabilities, which are now generally available, that help customers better manage scale, reduce costs and satisfy compliance mandates. Users can now transform and prepare data for downstream use, route data to different destinations and multiple tenants to manage scale, filter data to control volume and redact sensitive data for compliance.

Also generally available today is the Mandiant Threat Defense service for Google Security Operations, which provides comprehensive active threat detection, hunting and response. The service includes Mandiant experts working alongside customer security teams, using AI-assisted threat hunting techniques to identify and respond to threats, conduct investigations and scale response through security operations SOAR playbooks, effectively extending customer security teams.

Security Command Center

Google continues to enhance the Security Command Center with new capabilities focused on protecting AI systems, sensitive data and improving compliance workflows.

The recently announced AI Protection offering helps customers discover AI assets, secure models and data, and detect threats across the AI lifecycle. A key feature, Model Armor, is now generally available and integrated with Vertex AI, enabling automatic content safety and security control applications across multiple clouds without requiring application changes. Additionally, new Data Security Posture Management capabilities, set to preview in June, will support the discovery, classification and governance of sensitive data, including AI training data, directly within Google Cloud analytics and AI tools.

To support compliance efforts, Google announced that it is launching a Compliance Manager in preview by the end of June. The new tool will provide a unified workflow for defining policies, configuring and enforcing controls, monitoring systems, and auditing compliance based on the foundation of Assured Workloads.

Other enhancements include a preview integration with Snyk Inc. to help developers find and fix software vulnerabilities and new Security Risk dashboards for Google Compute Engine and Kubernetes Engine, now generally available, offering in-console visibility into top vulnerabilities and issues.

Google is also expanding its Risk Protection Program, which offers discounted cyber insurance based on cloud security posture. New partners Beazley plc and Chubb Ltd. have joined Google in the initiative, broadening international coverage and customer choice. Notably, Chubb will provide insurance for risks related to quantum computing exploits, along with affirmative coverage for AI-specific risks, available exclusively to Google Cloud customers and workloads.

Data and network security

Google is also expanding its data security capabilities with new advancements in confidential computing and data protection.

Confidential GKE Nodes featuring AMD SEV-SNP and Intel TDX will become generally available in the second quarter, allowing organizations to protect standard Kubernetes workloads without requiring code changes. Additionally, Confidential GKE Nodes with Nvidia Corp. H100 graphics processing units will enter preview, offering confidential GPU computing for high-performance tasks.

Google’s Sensitive Data Protection discovery service is now generally available for Vertex AI and Azure Storage, providing continuous monitoring of sensitive assets. Upcoming features include data-in-motion scanning via Cloud Load Balancing and Secure Web Proxy, as well as support for Dataplex V2.

Also previewed today were two new hardware-based security options: a single-tenant Cloud HSM for dedicated, isolated key management and an enhanced bare metal HSM that simplifies deployment with pre-configured units.

On the network security side, Google is enabling more flexible protections through Network Security Integration, which allows third-party network appliances to be inserted without disrupting routing policies. Out-of-band integrations are also now generally available, while in-band integrations are in preview.

Image: Google