Check Point and Google Cloud Forge Alliance to Secure Autonomous AI Agents
- Partnership Announcement: Check Point and Google Cloud collaborate to secure autonomous AI agents.
- Security Layers: Three-layered defense (Control Plane, Governance Layer, Runtime Intelligence Layer).
- Availability: Solution slated for release in late June 2026.
Experts agree that this partnership addresses critical security gaps in autonomous AI agent deployments, offering a robust framework for governance and real-time threat protection.
Check Point and Google Cloud Forge Alliance to Secure Autonomous AI Agents
REDWOOD CITY, CA β April 22, 2026 β As enterprises race to deploy autonomous artificial intelligence, cybersecurity leader Check Point Software Technologies has announced a landmark partnership with Google Cloud to secure this new frontier. The collaboration will integrate Check Point's AI Defense Plane directly with Google Cloud's Gemini Enterprise Agent Platform, creating a comprehensive security solution designed to govern and protect AI agents operating at scale.
The New Security Frontier: Agentic AI
The era of AI is rapidly evolving beyond simple chatbots and content generators. Businesses are now deploying sophisticated, autonomous AI "agents" capable of executing complex, multi-step tasks. These agents can invoke software tools, query vast corporate databases, and independently execute entire workflows, acting as a new class of digital workers. While this promises unprecedented gains in productivity and innovation, it also opens a Pandora's box of new security risks that traditional security models are ill-equipped to handle.
Historically, cybersecurity has focused on controlling access: who is allowed to enter a system or view a piece of data. However, with autonomous agents, the critical question shifts from who has access to what the AI is allowed to do. An agent with legitimate access could be tricked by a malicious prompt into exfiltrating sensitive data, or it could autonomously execute a flawed workflow that disrupts critical business operations. The risk is no longer just at the point of entry but is continuous and dynamic, emerging in real-time during live agent interactions.
This shift necessitates a move away from static, perimeter-based defenses toward a model of continuous behavioral monitoring and runtime protection. Organizations require intelligent guardrails that can understand the context of an AI's actions and intervene before a malicious or harmful outcome occurs.
A Three-Layered Defense for the AI Era
The partnership between Check Point and Google Cloud aims to deliver this new security paradigm through a multi-layered architecture. The model leverages the strengths of both companies to provide end-to-end protection for AI agents.
"The emerging architecture for agentic security requires three layers: a control plane for identity and connectivity, a governance layer for policy enforcement, and a runtime intelligence layer for behavioral protection," explained David Haber, VP of AI Security at Check Point Software Technologies. "Google Cloud's Enterprise Agent Platform provides the control plane. Check Point adds the other two."
This integrated solution breaks down as follows:
1. The Control Plane (Google Cloud): Google's Gemini Enterprise Agent Platform serves as the foundational layer, managing agent identity, connectivity, and orchestration. It provides the central "air traffic control" for the agent fleet.
2. The Governance Layer (Check Point): Check Pointβs AI Defense Plane builds on this foundation, allowing security teams to establish and enforce policies before agents are deployed. This includes creating allow and deny lists for tools and skills, flagging risky agent configurations, and centrally managing policies across the entire agent ecosystem.
3. The Runtime Intelligence Layer (Check Point): This is where the security becomes truly dynamic. Integrated directly with Google Cloud's Agent Gateway, Check Point provides real-time, inline protection. It inspects every action an agent takes to determine if it should proceed. This layer is designed to detect and block sophisticated threats such as prompt injection attacks, prevent the leakage of sensitive data through agent responses, and screen every tool call an agent makes before it is executed.
"We govern which agents, tools, and connections are allowed, and we inspect every action at runtime to determine whether it should proceed because in agentic systems, access alone doesn't guarantee the right outcome," Haber added.
Fortifying the Enterprise AI Ecosystem
For Google Cloud, this partnership is a strategic move to fortify its burgeoning AI ecosystem and address a primary concern for enterprises considering large-scale AI adoption: security. By integrating a specialized AI security solution from a trusted cybersecurity leader, Google makes its Gemini Enterprise Agent Platform a more secure and attractive proposition for businesses that are rightly concerned about the risks of deploying autonomous agents.
The Gemini platform is designed to be the connective tissue of the modern enterprise, linking employees, data, and fleets of AI agents. It provides developers with tools like the Agent Development Kit (ADK) and a low-code Agent Studio, while offering MLOps tools for management and a secure "Agent Sandbox" for testing. By embedding Check Point's security directly into this ecosystem, Google provides a secure-by-design framework that builds customer trust.
"Google Cloud is committed to providing the industry's most open cloud and helping customers accelerate their digital transformations," said Vineet Bhan, director of security and identity partnerships at Google Cloud. "Through this new partnership, Check Point will use Google Cloud's infrastructure to power new capabilities that can improve operations and create real-world value for businesses." This collaboration signals Google's understanding that robust, third-party security integration is not a weakness but a strength that accelerates enterprise adoption.
Navigating a Crowded and Complex Battlefield
Check Point and Google Cloud are not alone in recognizing the urgent need for AI security. The entire cybersecurity industry is pivoting to address the unique threats posed by generative AI and agentic systems. Major players like Palo Alto Networks are integrating "Precision AI" across their platforms, offering AI Runtime Security and AI Security Posture Management (AI-SPM). CrowdStrike is leveraging its Falcon platform to provide full-lifecycle protection for Large Language Models (LLMs), including AI model scanning and runtime data protection.
Cloud rivals are also building out their native security capabilities. Microsoft has embedded AI threat protection within its Defender for Cloud and is promoting agent identity management through Entra. Similarly, AWS offers a suite of security features for its AI workloads, including Guardrails for its Amazon Bedrock service.
Against this competitive backdrop, the Check Point-Google Cloud partnership stands out for its deeply integrated, multi-layered approach that explicitly separates and addresses the control, governance, and runtime planes of security. By combining Google's platform-native controls with Check Point's specialized, real-time threat intelligence and behavioral analysis, the offering presents a compelling defense-in-depth strategy that may prove crucial for organizations navigating the complexities of multi-cloud and hybrid AI deployments.
The Broader Impact on Cloud and AI Governance
This collaboration is more than just a product integration; it represents a significant milestone in the evolution of cloud security and AI governance. As autonomous agents become integral to business operations, they must be treated as first-class digital identities with their own permissions, audit trails, and security oversight. This partnership provides a clear framework for managing that identity lifecycle securely.
The market demand is undeniable. Industry surveys show that generative AI security is a top budget priority for enterprises, many of which lack full visibility into their expanding AI footprint. The shift to agentic AI creates an even larger attack surface, encompassing not just models and prompts but also agentic workflows, delegated actions, and the potential for "shadow agents" operating without IT oversight.
The solution, which is slated for availability in late June 2026, aims to provide the unified visibility and control that CIOs and CISOs need to manage this new reality. By offering a single plane of glass for discovering, governing, and protecting AI interactions, the integrated platform addresses the critical need for proactive risk management. This integrated approach aims to provide the guardrails necessary for businesses to not only adopt but also trust the autonomous systems poised to redefine the future of work.
π This article is still being updated
Are you a relevant expert who could contribute your opinion or insights to this article? We'd love to hear from you. We will give you full credit for your contribution.
Contribute Your Expertise β