Google Cloud and Wiz debut new AI security agents at Next '26, including Threat Hunting and Detection Engineering agents, to combat automated zero-day exploits
Google Cloud and Wiz launched new AI security agents at Next '26 to combat automated zero-day exploits and secure vibe-coded apps across multi-cloud environments.
Context & Ripple Effects
This is the latest step in Google Cloud’s progression from an LLM-based security workbench in 2023 to Gemini-backed threat intelligence in 2024 and a unified security offering in 2025. The Wiz partnership adds specialized agent workflows to that broader platform arc.
It also lands as related coverage documents AI being used to discover and weaponize a zero-day, raising the value of faster hunting and detection-engineering workflows rather than security tools that only summarize alerts.
First-order effects
- Google Cloud and Wiz customers gain dedicated AI agents for threat hunting and detection engineering, aimed at identifying and responding to automated zero-day activity across multi-cloud estates.
- Google Cloud deepens its security-platform proposition by pairing its existing security and threat-intelligence assets with Wiz’s cloud-security presence; Wiz gains a route into Google Cloud’s security workflow.
Second-order effects
- Security teams will evaluate AI security products on whether they can operationalize investigations and detection content across heterogeneous cloud environments, not simply provide chatbot assistance.
- Rival cloud-security and security-operations vendors face pressure to package comparable agentic workflows and to demonstrate safeguards for AI-assisted security actions, particularly as organizations deploy more AI-generated applications.
Third-order effects
- If AI-assisted exploitation becomes more common, cloud security is likely to shift toward continuous, agent-supported detection and response, with human analysts increasingly setting controls, validating outputs, and handling high-consequence decisions.
- The durable competitive advantage may move toward vendors that combine threat intelligence, cloud telemetry, and workflow integration; that consolidation can make governance and interoperability more important for buyers operating across clouds.
The trend: This is one data point in the shift from AI as a security analyst copilot toward embedded agents that execute bounded security operations against AI-accelerated threats.