Home > News > featured news > Cloudflare Equips Organizations with the Zero Trust Security They Need to Safely Use Generative AI

Data Security, Platform Security, Software Security

Cloudflare Equips Organizations with the Zero Trust Security They Need to Safely Use Generative AI

Businesswire | May 16, 2023 | Read time : 06:00 min

Cloudflare, Inc. (NYSE: NET), the security, performance, and reliability company helping to build a better Internet, today extended its single-vendor SASE platform, Cloudflare One, to generative artificial intelligence (AI) services. Cloudflare One for AI, a suite of Zero Trust security controls, will enable enterprises to safely and securely use the latest generative AI tools without putting intellectual property and customer data at risk.

With every transformative step forward in technology, from mobile phones to cloud computing, there are new security threats that rise to the surface. Major companies have banned the use of popular generative AI chat apps because of sensitive data leaks, and Italy instituted a temporary ban on generative AI tools for inadequate user data protections. According to a KPMG survey on generative AI, AI is expected to have an enormous impact on business, but the majority of US executives surveyed are years away from implementing it; cyber security (81%) and data privacy (78%) are the most top of mind concerns for leaders. CISOs and CIOs need to strike a balance between enabling transformative innovation through AI and still maintaining compliance with data privacy regulations. Whether it’s an employee experimenting with AI, or a company initiative, once proprietary data is exposed to AI, there is no way to reverse it.

"AI holds incredible promise, but without proper guardrails it can create significant risks for businesses. It is far too easy, by default, to upload sensitive internal or customer data to AI tools. Once the data is used for training AI, it is virtually impossible to get it out," explained Matthew Prince, co-founder and CEO of

Cloudflare. "If you were going to let a class of university students rummage around in your internal data, you'd of course put clear rules in place on what data they can access and how it can be used in their education. Cloudflare's Zero Trust products are the first to provide the guard rails for AI tools, so businesses can take advantage of the opportunity AI unlocks while ensuring only the data you want to expose gets shared."

Cloudflare One for AI provides a simple, fast, and secure way for companies to safely build using the latest generative AI technologies, without compromising security or performance. With Cloudflare One, companies can gain visibility into and measure AI tool usage, prevent data loss, and manage integrations:
Cloudflare Gateway helps companies observe how many employees are experimenting with AI services, and adds context when planning for budgets and enterprise licensing.
Service tokens give administrators a clear log of API requests, control over the specific services that can access AI training data, and the ability to revoke tokens with a single click when building ChatGPT plugins for internal and external use.
Cloudflare Tunnel provides an encrypted, outbound-only connection to Cloudflare’s network. Every request will be checked against the access rules configured for services protected by Cloudflare One or when teams are ready to allow an AI service to connect to their infrastructure.
Cloudflare’s Data Loss Prevention (DLP) service provides a safeguard to close the human gap in how employees may share data. Simple pre-configured options can check for data that looks like social security numbers or credit card numbers, and custom scans can look for patterns based on data configurations for a specific team. More granular rules can even allow select users to experiment with projects containing sensitive data, with stronger limitations on the majority of teams and employees.Cloudflare's cloud access security broker (CASB) service gives comprehensive visibility and control over SaaS apps. Soon, Cloudflare CASB will be able to scan the AI tools that your team uses to detect misconfiguration and misuse.

Generative AI is an exciting technology with the promise to transform how we work. As this technology evolves and new tools and plugins are developed, Cloudflare’s platform approach to security will ensure that enterprises everywhere can embrace these productivity enhancements without creating bottlenecks and ensure compliance with the latest regulations.

About Cloudflare

Cloudflare, Inc. (www.cloudflare.com / @cloudflare) is on a mission to help build a better Internet. Cloudflare’s suite of products protect and accelerate any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was awarded by Reuters Events for Global Responsible Business in 2020, named to Fast Company's Most Innovative Companies in 2021, and ranked among Newsweek's Top 100 Most Loved Workplaces in 2022.

Spotlight

Risk-Based Authentication eBook: How Duo Can Reduce Risks for Hybrid Work

Risk-Based Authorization solves two challenges: it allows users to gain access from anywhere and ensures that access is secure. Find out how to frustrate attackers, not users with RBA in this guide

More featured news

Spotlight

Risk-Based Authentication eBook: How Duo Can Reduce Risks for Hybrid Work

Risk-Based Authorization solves two challenges: it allows users to gain access from anywhere and ensures that access is secure. Find out how to frustrate attackers, not users with RBA in this guide

Related News

Enterprise Security

Guardsquare Announces Strategic Partnership with Redbelt Security

Silicon Canals | July 14, 2023

Sendle, the most affordable delivery service built for small business, has beefed up its portfolio of shipping services designed to help small businesses succeed with the launch of Sendle Three-Day Guaranteed. This new, expedited shipping service offers small businesses a reliable, cheaper option to United Parcel Service (UPS) for fast, national package delivery. Proving that affordable shipping does not have to be slow, small businesses throughout the U.S. can now take advantage of Sendle’s expansive national network for even more efficient package deliveries that save them more time and money. With Sendle Three-Day Guaranteed, all small businesses can now get their goods picked up from their doorstep and delivered in three business days or less to wherever they need to go in the U.S. – with no extra fees or contracts. There is also no minimum pick-up quantity required. If a Sendle package isn’t delivered within three business days, Sendle will refund the small business the cost of the delivery – no questions asked. The Sendle Three-Day Guaranteed service includes tracking and $150 cover, and is 100% carbon-neutral at no extra cost. “Small businesses deserve more choice and fairer pricing when it comes to parcel delivery. That’s why Sendle is leading the charge to shake up the logistics space by delivering quick, reliable, and cheaper shipping services tailored specifically for small business. Today, we are proud to introduce a game-changing alternative to UPS that is guaranteed to get goods delivered in three days or less, at an unbeatable price,” says James Chin Moody, Sendle CEO and co-founder. “We are on a mission to liberate small businesses from the burdens of logistics, allowing them to focus on what truly matters. By unlocking precious time while saving them some money, we’re empowering small businesses to thrive. This is just the beginning – you can expect to see even greater innovations from us as we relentlessly fight for the success of small businesses.” Complementing Sendle Saver, the company’s best value shipping option, and Sendle Preferred, which offers delivery in one to five days, the new Three-Day Guaranteed service provides the same, easy and reliable service Sendle’s small business customers have already come to love – and now at an even faster pace. Sendle handles the end-to-end journey of every parcel shipped, offering dedicated customer service by real people, as well as a powerful online dashboard where customers can track and reschedule their deliveries, and more. “Brush Club operates in the sustainability sector and fast and reliable deliveries are integral elements of our brand promise. Customers value our commitment not just to their dental health, but also to the environment. A crucial part of that commitment is ensuring we deliver their sustainable dental kits in a timely and reliable manner,” says Santiago Martinez Oropeza, CEO and founder of Brush Club. “Sendle understands that small businesses like ours have to work fast. And now, with their Three-Day Guaranteed service, we can promise delivery times and keep them, and that builds trust with customers, sets us apart in a competitive market, and greatly enhances our customer retention.” Small businesses can sign up for fast, more affordable shipping now Sendle Three-Day Guaranteed starts at $4.59 and small businesses in the U.S. can immediately sign up and start using the service at sendle.com. “Sendle’s new Three-Day Guaranteed Service will benefit us and our customers – especially with our refill option taking off,” says Yvette Nathalie Brown, celebrity tea tender and founder of Tshikovi Tea House. “Our customers can refill their orders by sending their canisters back to us, and the sooner we get them back, the sooner we can refill them. Faster and more affordable shipping means our customers won’t run out of their favorite teas and our business can continue to grow with increased customer retention.” The new Sendle Three-Day Guaranteed service is also available as an option to shipping and e-commerce platforms through Sendle’s new Digital Partner Program (DPP) that was also announced today. More information about Sendle’s new DPP can be found online. About Sendle Sendle is the first carrier in the United States specifically designed to serve the needs of small ecommerce businesses. Sendle levels the playing field for small businesses by offering simple, affordable shipping across the U.S. and internationally, with no hidden fees, subscriptions, or warehousing required. Merchants simply purchase a label and schedule a pickup from Sendle, and their package can be dropped off or picked up from their front door. Sendle is also the first 100% carbon neutral shipping carrier in the U.S. and is a Certified B Corporation and Climate Neutral Certified. The company was founded in Australia in 2014 and is headquartered in Sydney, Australia; Seattle, Washington; and Toronto, Canada.

Data Security, Cloud Security

Concentric AI Announces Multi-Lingual Support to Address Growing Global Demand for its Leading Data Security Posture Management Solution

Business Wire | August 24, 2023

Concentric AI, a leading vendor of intelligent AI-based solutions for autonomous data security posture management (DSPM), today announced support for data in German, Spanish, Italian, French, and Dutch languages, enabling it to meet rapidly growing global demand for its leading DSPM solution. As a result, today’s update to Concentric AI’s Semantic Intelligence™ DSPM solution enables multinational customers to discovery, classify, categorize, and secure their data in these newly supported languages. It also accelerates Concentric AI’s international expansion by addressing the data security needs of new customers that have a significant amount of private data in these languages. “We have seen a significant amount of interest from international customers, and with today’s announcement we are bringing our groundbreaking AI-enabled DSPM solution to more customers and countries,” said Karthik Krishnan, Founder and CEO, Concentric AI. “The way Concentric AI understands the content and context of data using Large Language Models (LLMs) differentiates us from competitors in the Data Access Governance and DSPM space. These new advancements will fuel our expansion into new markets as well as expand support for non-English data for our existing multinational customers.” Concentric AI’s Semantic Intelligence solution is enabled by LLMs that understand clients’ data to enable the industry’s most accurate data classification and DSPM solution. Now the LLMs developed by Concentric AI can read and understand the context of files, documents, and data in these new languages to provide the most accurate data discovery and classification solution to unmet needs in new markets. “This update is also important for our partners because many of their customers are either internationally based or they have customers who have data in multiple languages,” added Krishnan. “It also enables us to grow our partner ecosystem in these important new markets.” Concentric AI’s DSPM solution scans organizations’ data, detects sensitive or business critical content, identifies the most appropriate classification category, and automatically tags the data. Concentric AI uses artificial intelligence (AI) to improve discovery and classification accuracy and efficiency to avoid endless regex rules and inaccurate end user labeling. In addition, Concentric AI can monitor and autonomously identify risk to financial and other data from inappropriate permissioning, wrong entitlements, risky sharing, and unauthorized access. It can automatically remediate permissions and sharing issues or leverage other security solutions and cloud APIs to quickly and continuously protect exposed data. Concentric AI’s Semantic Intelligence™ automates unstructured and structured data security using deep learning to categorize data, uncover business criticality and reduce risk. Its Risk Distance™ analysis technology uses the baseline security practices observed for each data category to spot security anomalies in individual files. It compares documents of the same type to identify risk from oversharing, third-party access, wrong location, or misclassification. Organizations benefit from the expertise of content owners without intrusive classification mandates, with no rules, regex, or policy maintenance needed. About Concentric AI With Concentric AI, organizations can finally address their unmet data security needs by discovering and protecting business-critical content. Concentric AI protects intellectual property, financial data, PII/PCI content, customer data, business confidential content and more, across on-premises and cloud-based data stores, as well as messaging and communication applications. The Concentric AI Semantic Intelligence™ Data Security Posture Management (DSPM) solution uses deep learning and Risk Distance™ analysis to accurately categorize data, assess risk, and remediate security issues – without relying on upfront rules or complex configuration. Concentric AI is venture-backed by leading Silicon Valley VCs and is headquartered in San Jose, Calif.

Data Security, Certifications and Training

Node4 Acquires ThreeTwoFour to Strengthen its Cybersecurity Offering and Expand In the Finance and Banking Sector

businesswire | July 10, 2023

Node4, a cloud-led digital transformation Managed Services Provider (MSP), has today announced the acquisition of ThreeTwoFour, an award-winning information security and technology risk specialist. The acquisition is Node4’s third significant growth purchase in the last 18 months, having also bought risual, an IT managed services and solutions provider and Tisski, a leading UK-based independent Microsoft Business applications partner. ThreeTwoFour is renowned for its extensive suite of information security services, including programme delivery, cyber strategy, risk and control assessment and governance. It also brings strong experience across the financial services sector, broadening Node4’s reach. In addition, ThreeTwoFour’s expertise in M&A Cyber Due Diligence adds further capabilities to the Node4 solutions and services portfolio. The acquisition significantly enhances Node4’s security and transformation capabilities, particularly for enterprise-level clients. Drawing on ThreeTwoFour’s capabilities, Node4 will also be better equipped to meet the increasing requirements in the public sector and government frameworks for effective cyber security solutions. ThreeTwoFour’s founder, Alex Coburn, along with his leadership team, will remain with the business as it integrates with Node4. The strongly-positioned ThreeTwoFour brand will also function as the consultative arm of Node4’s security practice. With its core team based in the UK, ThreeTwoFour is also supported by specialists working remotely from all over the world. In the past two years, the company has deployed team members from three continents and eight different countries, enabling it to support clients around the clock. “The ThreeTwoFour team are highly experienced and skilled professionals with a strong leadership team and exceptional track record of success,” commented Andy Gilbert, CEO and Founder of Node4. “The organisations are also a great cultural fit and together, we anticipate driving strong growth across our shared customer base and beyond. We look forward to working closely with Alex and everyone at ThreeTwoFour.” “We are delighted to join forces with Node4, whose reputation for customer-focused excellence is second-to-none across the UK technology industry,” said Alex Coburn, Founder of ThreeTwoFour. “By integrating our expertise and Node4’s existing services portfolio, we are confident that we can deliver market-leading security and risk solutions for enterprises and SMEs alike.” Alongside its Cyber Essentials Certification, the firm provides expertise in Identity and Access Management, Privileged Access Control, Security Architecture, Data Loss Prevention, Security Operations, Vulnerability Management, NIST, ISO27001, SANS and other Risk Management Frameworks. About Node4 Node4 empowers private and public sector organisations across the UK to deliver positive outcomes, through technology and innovation. Thanks to a broad portfolio of fully managed services including Business Applications, Modern Workplace, Cloud, Network, Data and Security, clients are empowered to reach their strategic goals. Node4 fully owns its own a network of data centres, points of presence and operates best-in-class integrated tooling. Alongside strategic relationships with market-leading vendors such as Microsoft, Cisco and Fortinet, Node4 brings together the best options for infrastructure, platforms and applications, tailored to the needs of their clients.