Cloudflare launches Zero Trust capabilities, integration with major AI platforms

Cloudflare, the connectivity cloud company, has become the first cloud access security broker (CASB) to integrate with all three of the leading generative AI tools – ChatGPT Enterprise, Claude by Anthropic and Google Gemini – to deliver even more visibility and control over the use of generative AI in the workplace. 

With these integrations, Cloudflare customers also using these generative AI applications will be able to strengthen enterprise AI security in-real time and without the need for complex setups.  

Today, three out of every four employees use generative AI tools. At the same time, enterprises are working to keep sensitive corporate data safe, prevent accidental leaks, and maintain compliance with evolving regulations. This requires real-time visibility and proactive controls for security teams to safely enable generative AI use across their business.

“Employees are always looking for an edge – ways to save time, spark creativity, or boost efficiency. Using generative AI tools gives them that edge,” said Matthew Prince, CEO and co-founder at Cloudflare. 

“But there is often a missing link between rapid innovation and safety. Cloudflare has already introduced a number of safeguards to help businesses embrace AI, and now, we’re the only company that has built integrations directly into all three of the most popular tools to raise the bar on enterprise AI security for the whole industry.”

With these new integrations, customers have a new way to manage enterprise AI security as more employees use generative AI tools. Cloudflare’s CASB continuously scans ChatGPT Enterprise, Claude, and Google’s Gemini platforms to better protect customers’ sensitive data through automated and real-time visibility and proactive alerts. This ultimately gives security teams greater control and confidence that company data remains compliant and protected while employees use AI tools.

Cloudflare has also announced new capabilities for Cloudflare One, its Zero Trust platform, designed to help organisations securely adopt, build and deploy emerging generative AI applications. With these new features, Cloudflare is giving customers the ability to automatically understand, analyse and set controls on how generative AI is used throughout their organisation – without sacrificing security or privacy standards.

Across every team – from finance and marketing to engineering and design – companies are using generative AI to work faster, streamline daily tasks, and create powerful new applications, Cloudflare observed. However, this widespread adoption is frequently occurring without security or privacy in mind. For example, employees may accidentally paste confidential company information into chatbots, or engineers may deploy AI-driven apps without the input of their security teams, Cloudflare said. To prevent these risks, businesses need to understand and manage the use of AI so all employees can use it efficiently and safely—with security built in by default.

“Cloudflare is the best place to help any business roll out AI securely. We are the only company today that can offer the security of a Zero Trust platform with a full set of AI and inference development products—all backed with the scale of a global network,” said Prince.

“The world’s most innovative companies want to pull the AI lever to move, build and scale fast, without sacrificing security. We are in a unique position to help power that innovation–and help bring AI to all businesses safely.”

Cloudflare is introducing AI security posture management (AI-SPM) into its Zero Trust platform to allow organisations to safeguard against a range of potential threats posed by the wide adoption of AI tools, enabling businesses to move faster with the confidence that AI is being used safely by all teams. Now, with the availability of all features, security teams will be able to:

Discover how employees are using AI

With Cloudflare’s new Shadow AI Report, security teams can get instant insights from their traffic to gain a clear, data-driven picture of their organisation's AI usage. This granular view allows them to see not just that an employee is using an AI app, but which AI app, and what users are accessing it.

Protect against shadow AI

Cloudflare Gateway makes it easy to automatically enforce AI policies at the edge of Cloudflare’s network, ensuring consistent security for every employee, no matter where they work. Security teams can choose to fully block unapproved AI applications, limit the types of data uploaded into AI applications, and complete reviews of AI tools, to ensure they continue to meet security and privacy standards.

Safeguard sensitive data without fully restricting AI usage

AI Prompt Protection allows security teams to identify potentially dangerous or risky employee interactions with AI models, and flag those prompts and responses. Policies can now be enforced inline at the prompt level to mitigate risk early on, and warn the employee about, or block them from, submitting sensitive data—like source code—to an untrusted AI provider. This will give security teams the control they need to monitor company data that may be sent outside the organisation, without fully restricting employees’ usage of AI tools.

Gain visibility of AI model interactions with tools outside the business

Zero Trust MCP Server Control consolidates all Model Context Protocol (MCP) tool calls—a request from an AI model or application to a server to execute a specific task—into a single dashboard. This visibility ultimately allows all MCP traffic, regardless of origin, to be routed through Cloudflare for increased control and access management. With centralised insights, security teams can set user-level policies at both the gateway and individual MCP server levels.