Cloudflare Partners with Wiz to Secure the Global AI Attack Surface, Eliminating Blind Spots Caused by Shadow AI

Cloudflare announced a partnership with cloud and AI security leader Wiz, now part of Google Cloud, to give security teams a unified way to analyze and protect AI-powered applications across their entire environment. By integrating the power of Cloudflare’s AI Security for Apps directly into the Wiz Security Graph, organizations will gain access to the most comprehensive map of their entire AI footprint, and the tools needed to secure it.

Organizations are shipping AI-powered features faster than security teams can track them. Every new chatbot, copilot, or AI-powered search endpoint is a potential attack surface vulnerable to prompt injection, sensitive data exfiltration, and abuse. The challenge is knowing which ones exist across your web properties, whether they have security guardrails in place, and whether those guardrails are actually working. To help organizations understand their AI footprint and whether they have the necessary guardrails in place, CISOs need a single source of truth where they can better understand and secure their AI and cloud infrastructure.

The integration helps customers autonomously eliminate AI blind spots across their infrastructure, allowing security teams to safely accelerate AI adoption. Cloudflare's AI Security for Apps equips organizations with guardrails at the edge to secure AI endpoints from risks such as prompt injection and unsafe topics, while Wiz’s AI Application Protection Platform (AI-APP) simultaneously maps the complete AI application and surfaces the security gaps. By integrating Cloudflare’s security rules into the Wiz Security Graph, security teams can prioritize risks based on exploitability. As a result, CISOs gain visibility into the LLMs operating across their web properties and runtime controls to enforce policies. Cloudflare and Wiz are model and host-agnostic, protecting endpoints regardless of the LLM or cloud provider.

“AI is the most transformative technology we’ve seen in a generation, powering countless capabilities. But for a majority of businesses, it can be a black box. When talking with CISOs today, they are struggling with the balance of being an enabler of innovation with AI, while combating uncontrolled shadow AI across their organization because their legacy security tools are effectively useless at this level," said Tom Evans, Chief Partner Officer at Cloudflare. “The Cloudflare and Wiz partnership helps tackle this trade-off. Now, we are delivering a solution to allow innovation with AI at speed, without the worry that their most sensitive data will be exposed.”

“Security alignment isn’t just about reducing risk, it’s an enabler of AI application development,” said Oron Noah, VP of Product, Extensibility & Partnerships at Wiz. “By combining Wiz’s end-to-end visibility with Cloudflare’s edge protections, we close a critical gap in how AI risk is managed. This partnership gives organizations a unified view of AI application endpoints and shared risk context, helping them stop threats like prompt injection and shadow AI before they start.”

Cloudflare’s partnership with Wiz empowers customers to:

The partnership delivers a seamless integration without needing custom workflows or additional agents to deploy. Cloudflare’s detections run inline on its global network, one of the largest and most interconnected in the world, so organizations gain AI security without architectural changes or performance trade-offs. 

Source: Cloudflare media announcement