What this integration does
This integration sends gateway blocks, holds, contained threats and stops to Google Security Operations in UDM, and reads AI events back for your AI record. Analysts can search agent activity beside other security telemetry, while AI owners gain a wider view of how those systems behave.
Benefits
Use cases
Following held payments through the SOC
A bank's payment agent tries an unusual transfer and the gateway holds it. SOC analysts see the hold in Google Security Operations beside related activity, which helps them judge whether the attempt needs a closer look.
Finding AI traffic in a retail cloud
A retailer's teams use AI services across several cloud projects. AI events read back from Google Security Operations give the AI owners a wider view of that activity, which helps them ask the right teams about it.
Handling an agent threat as a security event
A software company contains a threat involving one of its coding agents. The event reaches Google Security Operations, so analysts can treat it like any other security event and connect it with their wider investigation.
Coverage is confirmed for your environment during onboarding. Product names belong to their owners and are used only to describe a technical connection.