The industry has spent years bringing security closer to development - shifting left, embedding guardrails, and integrating checks earlier in the lifecycle. But AI has disrupted that progress. Developers can now spin up complex AI applications, powered by models and agents that connect to sensitive data, call internal APIs, and operate in the cloud, in minutes using natural language prompts. At this unprecedented speed of innovation, security teams can’t keep up. AI has not just accelerated development, it has decoupled the developer journey from the security journey.
At the same time, gaining visibility into AI usage has become inherently difficult. Traditional signals, like tracking known AI providers through logs, only tell part of the story. In reality, according to Wiz Research, 88% of organizations run self-hosted AI models, and 79% expose AI workloads that can touch sensitive APIs or data without safety nets. Shadow AI, rogue agents, and publicly exposed endpoints are expanding the attack surface at unprecedented speed. That’s why we’re excited to announce Wiz’s integration with Cloudflare, merging deep cloud context with edge-level visibility and AI endpoint protection, so teams can see how AI applications are built, how they're exposed, and how to secure them.
AI is the most transformative technology we’ve seen in a generation, powering countless capabilities. But for a majority of businesses, it can be a black box. When talking with CISOs today, they are struggling with the balance of being an enabler of innovation with AI, while combating uncontrolled shadow AI across their organization because their legacy security tools are effectively useless at this level. The Cloudflare and Wiz partnership helps tackle this trade-off. Now, we are delivering a solution to allow innovation with AI at speed, without the worry that their most sensitive data will be exposed.
Tom Evans, Chief Partner Officer, Cloudflare
Merging Deep Cloud Context with AI Endpoint Protection
Securing AI applications requires more than just knowing they exist, it requires understanding how they’re built, what they access, and how they’re exposed.
Security alignment isn’t just about reducing risk, it’s an enabler of AI application development. By combining Wiz’s end-to-end visibility with Cloudflare’s edge protections, we close a critical gap in how AI risk is managed. This partnership gives organizations a unified view of AI application endpoints and shared risk context, helping them stop threats like prompt injection and shadow AI before they start.
Oron Noah, VP of Product, Extensibility, and Partnerships, Wiz
Wiz provides deep cloud context, mapping AI workloads to the underlying infrastructure, identities, data stores, and code that power them. It identifies which AI models are self-hosted, which services they interact with, and where sensitive data or misconfigurations may introduce risk - giving teams a clear view of their AI footprint across the environment, including which application endpoints are exposed on the Security Graph.
But AI applications don't exist in isolation, they're served through DNS, sit behind load balancers, and connect to public-facing infrastructure. That's why the Cloudflare integration also gives teams visibility into DNS zones, records, and cloud workloads fronted by Cloudflare, so they can see how AI services are exposed at the edge and detect sensitive data or secrets in those configurations. When an AI endpoint is reachable through a misconfigured DNS record or an unprotected load balancer, that's not just an infrastructure issue, it's an AI security issue.
With the Cloudflare AI Security for Apps integration, Wiz’s AI visibility extends further, showing which of those AI application endpoints are secured by Cloudflare and which still need protection. As those endpoints are accessed - whether by users, APIs, or other agents - Cloudflare’s guardrails enforce protections to safeguard against threats like prompt injection and PII exposure.
By connecting these layers, security teams gain a unified view of their AI attack surface, from the cloud environment where AI applications are built to the public-facing endpoints where they are exposed. So when an exposed AI model with prompt injection vulnerabilities is identified in Wiz, teams can take action by deploying Cloudflare AI Security for Apps to prevent potential misuse or data leaks.
Closing the Gap Between AI Visibility and Protection
By bringing together Wiz’s cloud context and Cloudflare’s AI application endpoint protection, teams can move from fragmented visibility to actionable control over their AI applications. This enables security teams to:
Understand the complete AI attack surface: See where AI workloads actually run, what they connect to, and which endpoints are exposed - across both self hosted and third-party models. For example, detect an untracked MCP server, trace its exposure through DNS records and load balancers, and use Wiz ASM to uncover associated risks like exposed sensitive data.
Map sensitive data flows with cloud context: Trace how data moves through AI applications using the Wiz Security Graph, linking models, agents, tools, and data sources. Teams can monitor flows to prevent sensitive customer data or PII from reaching LLMs or leaking in AI responses, such as a chatbot inadvertently exposing client records.
Continuous Guardrail Validation: Verify in Wiz that AI endpoints are protected by Cloudflare, with alerts on unprotected or misconfigured endpoints for direct remediation in Cloudflare. For example, an AI agent with access to sensitive training data that isn’t behind Cloudflare protections can be remediated immediately.
Together, this gives teams a clear path from identifying AI risk to securing it - combining deep cloud context, edge-level visibility into how AI services are exposed through DNS and infrastructure, Wiz ASM proactive scanning for risks and exposures, and real-time protection at AI endpoints with Cloudflare.
Get Started with Wiz and Cloudflare
As AI-powered applications become a core part of modern cloud environments, they bring new risks that span from the cloud to the edge. Security teams need visibility across both and the control to act on what they find.
Joint customers can follow the guide in the Wiz Docs (login required) to get started with the Wiz and Cloudflare integration or learn more in our Joint Solution Brief.
