Skip to content
Find Cloud Security

AI agents inside cloud security products: what five vendors announced in 2026

By The Cloud Map Desk. Published , updated .

Desk research from public vendor pages. Vendor facts read September 2026, updated 2026-11-03. Profiles follow our published method; we did not run the products.

Announcements, 3 min read.

What was announced, and when?

In date order, from the vendors' own releases:

  • 22 April 2026, Aqua Security: Aqua Compass, an MCP server that lets AI agents investigate, contain and remediate runtime incidents with human oversight, plus dashboards that express runtime risk as monetary exposure.
  • 6 May 2026, Sysdig: Headless Cloud Security, CNAPP capabilities delivered as agent skills inside AI coding agents such as Claude Code and Cursor, built on Sysdig's runtime telemetry and Falco.
  • 29 July 2026, Orca Security: AI AppGen Security, which finds and assesses apps built on AI app builders outside standard pipelines, and AI Code Security Auditor, which applies AI-driven static analysis to code in existing pipelines. Orca said it expects general availability later in 2026.
  • 4 August 2026, Sysdig: Sysdig Secure AI, an AI-based investigation and response offering that works with the Sysdig Secure CNAPP.
  • 19 August 2026, Wiz: Penetration Test Findings reached general availability, bringing findings from bug bounties, audits, red team exercises and AI pen-test tools into the Security Graph.
  • 1 September 2026, Palo Alto Networks: acquired Console, an AI-native platform for resolving alerts, issues and requests, to deepen agentic capabilities in Cortex. Terms were not disclosed.

What are the two directions?

The announcements split into two kinds. Some put AI agents to work inside the security product: Aqua Compass, Sysdig Secure AI, Sysdig Headless and the Console acquisition are about agents that investigate, respond or bring security checks into a developer's AI coding tool. Others widen what is covered to include software made with AI: Orca's AppGen Security looks for apps built on AI app builders that never pass through a normal pipeline, and Wiz's pen-test findings feature accepts results from AI pen-test tools.

Does any of this change which category you need?

Not by itself. The six categories still describe what a tool looks at. These features change how findings are handled (by an agent, with human oversight) and widen the inventory (AI-built apps, MCP servers). If AI services or agents are part of your estate, pick AI services in the finder: it adds points to CNAPP, posture and data, and checks each vendor's AI security coverage.

What should a buyer ask?

  • Which actions can the AI agent take without a human approving them?
  • What data does the agent send outside your account, and to which model provider?
  • Is the feature generally available or in preview? Orca, for example, said AppGen Security general availability was expected later in 2026.
  • Is it included in the platform price?

What is not here

We list only announcements in our sources with dates and links. Vendor performance figures in these releases are not repeated. Other vendors may have made similar announcements that we have not read.

Sources