Thales and Google Cloud tighten security around AI agents

Thales has expanded its work with Google Cloud to help businesses keep AI agents in check. The expanded partnership links Thales AI Security Fabric with Google Cloud’s Gemini Enterprise. Together, they apply security, governance and visibility to interactions between users, agents, models and tools in real time.

Enterprises are now moving past AI pilots to deploy autonomous agents at scale. Unlike standard apps, these agents can reason, plan and act with other agents on their own. That opens up new attack surfaces that older security tools were never built to handle.

“Enterprises are moving from AI assistants to AI agents that can autonomously take action, make decisions, and interact with critical business systems. This requires a fundamentally different approach to security,” said Eva Rudin (top left), Senior Vice President, Cybersecurity Products, at Thales.

From an example given by Thales, an AI agent that settles insurance claims could possibly stray beyond its original mandate and might pull personal data from unapproved sources to sway payouts, which creates privacy and compliance risks. The Security Fabric keeps agents within set boundaries, limits their data access and blocks unsafe actions as they happen. It is also designed to guard against prompt injection, data leaks, unsafe outputs and complex agent-to-agent interactions.

Thales’ 2026 Data Threat Report found that 71 percent of organisations in Asia Pacific see AI as their top data security risk. Only 35 percent of APAC organisations know where all their data resides.

“As agents become more capable and connected to critical data and systems, customers need security and governance built into how they operate. Our work with Thales gives organizations additional capabilities to protect agentic AI workflows and adopt this next generation of AI with greater confidence,” said Vineet Bhan (top right), Director of Security and Identity Partnerships, Google Cloud.

Google Cloud opened its first Southeast Asia engineering centre in Singapore on September 15 and is already working with DBS on early financial agentic workflows. In August, Google Cloud also launched previews of Gemini Enterprise for Financial Services and Gemini Enterprise for Legal, both built for sectors where confidentiality and auditability matter most.