What happened
Google Cloud has introduced new security products and updates for organisations using autonomous AI agents. The changes include updates to CodeMender, new identity controls for agents and closer integration with Wiz. CodeMender is a code security agent that helps organisations find and fix software vulnerabilities more quickly by validating flaws and generating tested patches before attackers can exploit them. CodeMender now supports isolated verification and exploit simulation in either an operating system sandbox or a virtual machine, alongside human checks for local write and command execution. Google has also added more granular scanning options, allowing customers to scan a folder, a full repository or only files changed since the last scan.
CodeMender is a code security agent that helps organisations find and fix software vulnerabilities more quickly by validating flaws and generating tested patches before attackers can exploit them.
CodeMender now supports isolated verification and exploit simulation in either an operating system sandbox or a virtual machine, alongside human checks for local write and command execution.
Google has also added more granular scanning options, allowing customers to scan a folder, a full repository or only files changed since the last scan.
Auth Manager is now generally available and is designed to centralise credential management in a Google-managed vault governed by identity and access management policies.
Agent Identity JWT support has also entered preview, allowing agents to authenticate across Amazon Web Services, Microsoft Azure, on-premises back ends and MCP servers without relying on static, long-lived API keys.
Why it matters
The new security tools are intended to help security teams apply more granular perimeter controls across enterprise GKE clusters without having to manage large numbers of manual exceptions. The tools also aim to reduce vulnerability discovery time by over 95%, while keeping expert validation and remediation under human oversight.
The new security tools are intended to help security teams apply more granular perimeter controls across enterprise GKE clusters without having to manage large numbers of manual exceptions.
The tools also aim to reduce vulnerability discovery time by over 95%, while keeping expert validation and remediation under human oversight.
Industry reaction from early users focused on speed and oversight, with one CTO saying that the tools have the potential to reduce vulnerability discovery time by over 95%.
IDC also linked the launch to mounting remediation pressure on security teams, saying that nearly 40% of enterprises add vulnerabilities faster than they can remediate them.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
An agent must create a draft calendar event for Tuesday at 2 p.m. Which evidence would establish the requested result?
What to watch next
The new security tools from Google Cloud are designed to help organisations using autonomous AI agents improve their security posture. The tools include CodeMender, Auth Manager, and Agent Identity JWT support, which are intended to help security teams apply more granular perimeter controls and reduce vulnerability discovery time.
The new security tools from Google Cloud are designed to help organisations using autonomous AI agents improve their security posture.
The tools include CodeMender, Auth Manager, and Agent Identity JWT support, which are intended to help security teams apply more granular perimeter controls and reduce vulnerability discovery time.
Google is also expanding its relationship with Wiz as customers try to manage security across cloud environments and development pipelines.
Wiz Defend and Google Security Operations now share a common data model and support bi-directional synchronisation.
Wiz AI Static Application Security Testing, or Wiz AI SAST, has also entered preview, using agentic reasoning to analyse application behaviour and identify business logic flaws.