Snowflake Boosts Enterprise AI Security with Agent Identity and Guardrails

SnowflakeSnowflake

Snowflake is introducing new AI security innovations, including Agent Identity for auditability, Horizon AI Guardrails for prompt injection protection, and Data Movement Policies to prevent unauthorized data exfiltration. These updates aim to provide enterprises with the controls needed to securely deploy autonomous AI agents at scale.

Snowflake is enhancing its platform with new AI security capabilities designed to secure agentic AI deployments in the enterprise. Key additions include Agent Identity (public preview), which provides a distinct signal to identify actions performed by an AI agent, enabling auditability and near real-time access restriction. Horizon AI Guardrails (generally available) offer prompt injection defense, integrated into the Horizon Catalog.
Agent Identity
Public preview
Horizon AI Guardrails
Generally available
CoCo CLI Sandbox
Private preview
Data Movement Policies
Private preview
Data Exfiltration Detection
Private preview
Multi-Party Approval (MPA)
Private preview

These innovations address the amplified security risks that come with autonomous AI agents making critical business decisions, such as malicious prompt injections and unauthorized data movement. The platform also introduces CoCo CLI Sandbox (private preview) for client-side isolation to mitigate data exfiltration and malicious code execution when AI systems run code.

Snowflake also provides Data Movement Policies (private preview) to prevent configured data movement from agents outside the Snowflake trust boundary. Additionally, Multi-Party Approval (MPA) (private preview) enforces a "four-eyes" rule for critical security operations, and new CoCo security skills simplify security administration through natural language.

Snowflake Horizon Catalog architecture diagram illustrating interoperability, context, and governance across compute, storage, and external AI agents.
Snowflake
Snowflake
@Snowflake
X

AI agents are entering the enterprise fast. So are new security risks. We're solving for that, with new AI security innovations built to help organizations secure the agentic enterprise at scale, including: • Agent Identity for auditability and near real-time access restriction • Horizon AI Guardrails for prompt injection protection • Data Movement Policies to help prevent unauthorized data exfiltration • Multi-Party Approval and Snowflake Backups for stronger ransomware resilience • AI Security Posture Management and Compliance Reporting in Trust Center • CoCo security skills for conversational security administration and remediation Learn more: https://t.co/wd8kvgGyOZ

4retweets16likes
View on X

Still wondering? A few quick answers below.

Agent Identity provides a recognizable signal that identifies actions performed by an AI agent on behalf of a user. This new context enables auditability of agent actions and allows for near real-time restriction of agent access to sensitive data.

Horizon AI Guardrails offer a zero-day style defense layer against prompt injection. They are integrated into the Horizon Catalog and are designed to prevent adversaries from crafting inputs that override a model’s system instructions to extract sensitive information or trigger unintended actions.

Data Movement Policies are designed to prevent configured data movement from Snowflake agents to outside the Snowflake trust boundary. These policies provide granular controls to protect sensitive data from unauthorized movement, helping to defend against data exfiltration.

Multi-Party Approval (MPA) directly mitigates the risk of insider attacks and accidental destructive actions by enforcing a “four-eyes” rule. This means two authorized administrators must approve critical security-sensitive operations, enhancing resilience against threats like excessive data destruction.

Every HeadsUpAI update is written based on its original source and reviewed before it's published. Read our editorial standards →

Share this update