Cloudflare unveiled a new private networking layer and expanded its partnership with Wiz to secure what the companies describe as the “global AI attack surface.”

The first announcement centers on Cloudflare Mesh, a private network designed to connect users, applications, infrastructure, and AI agents without exposing systems to the public internet. The platform routes traffic over private IP space through Cloudflare’s global network, with encryption and zero-trust policies applied by default.

Mesh is built to support AI agents as they take on more autonomous roles inside enterprise environments. Organizations can assign each agent a distinct identity and apply granular access controls, allowing security teams to define what data, APIs, or systems an agent can access.

Cloudflare said the goal is to simplify connectivity while reducing risk. Instead of relying on VPNs or exposing internal services externally, Mesh provides a single networking layer that enables secure access across environments, including cloud and on-premises systems.

The second announcement focuses on visibility and protection for AI applications, as AI and agents drive more demand for Cloudflare services. Through its integration with Wiz, Cloudflare is combining cloud security insights with enforcement at the network edge.

Wiz maps AI-related assets across cloud environments, including applications, models, data flows, and configurations. It identifies potential risks such as exposed endpoints, misconfigurations, or vulnerabilities like prompt injection and sensitive data leakage.

Cloudflare then uses that information to apply protections in real time. This can include blocking malicious inputs, enforcing policies on AI traffic, and preventing unauthorized access or data exfiltration.

The integration is designed to give organizations a unified view of their AI environment while also enabling direct action on identified risks. It also helps surface “shadow AI,” or AI tools and endpoints deployed without centralized oversight, which can create blind spots for security teams.