Cloudflare launches Identity-Aware AI Gateway to track who is using AI

Cloudflare Inc. launched Identity-Aware AI Gateway, a service that attaches a verified identity to every artificial intelligence request leaving a company network, enabling IT and security teams to see which employee or automated system sent a prompt, set spending limits, and flag risky content. The service integrates with Cloudflare Access and includes AI Spend, a feature that learns normal AI usage patterns and alerts on anomalies, addressing the growing problems of cost spikes and data leakage. Cloudflare Chief Technology Officer Dane Knecht said the service flips the dynamic of clunky security by giving teams freedom to use any AI model while providing IT with real-time visibility and budget controls.

Cloudflare launches Identity-Aware AI Gateway to track who is using AI Cloudflare Inc. https://www.cloudflare.com/ today launched Identity-Aware AI Gateway, a service that attaches a verified identity to every artificial intelligence request leaving a company network. Information technology and security teams can now see which employee or automated system sent a given prompt to a model provider. The service also lets them set spending limits for an individual or a team and flag risky content automatically. Cloudflare said it requires no new systems. A companion feature called AI Spend goes at the cost problem from another angle. It learns what normal AI usage looks like for each person and each automated system on a network, then alerts teams when something breaks that pattern. Enterprise AI use is growing quickly and two problems are growing with it. Individual AI requests keep getting cheaper. Employees and bots are firing off far more of them, and bills spike with little warning. The security side is quieter. Employee names, passwords and confidential files can pass through to outside AI providers with nobody noticing. Today’s tools cap AI spending at the account level. They cannot name who ran up the bill. What was actually in the request does not show up in the logs either, so IT teams end up cleaning up after the fact. Chief Technology Officer Dane Knecht said clunky security becomes a speed bump and that fear of surprise bills and accidental leaks is pushing companies to lock down AI access. “Connecting our access controls directly to AI Gateway flips that dynamic,” Knecht said. “Teams get the freedom to work with any AI model they choose. IT gets real-time visibility, guardrails, and the budget controls they actually need.” The identity piece comes from wiring AI Gateway into Cloudflare Access, the company’s zero-trust access product. Companies that do so can drop the blind, shared application programming interface keys that make attribution impossible. Requests are authenticated against an existing identity provider and zero-trust network access setup. User and device posture are validated before anything reaches the model provider, and the verified identity is written into the request log. Funneling all AI traffic through a single point does other work as well. Repeat requests can be cached to cut redundant costs. Rate limits stop runaway usage before it hits the invoice. Automatic filters strip employee names, passwords and other sensitive data out of requests before they ever reach an outside AI provider. Model choice gets scrutiny too. AI Spend checks whether staff are pushing simple tasks through high-powered models that a lighter and cheaper option could handle, then surfaces those cases. Max Baumgarten, a security engineer at Flexport Inc., said shared API keys make it “almost impossible to tell who is using an AI service.” The freight logistics company put Cloudflare Access in front of AI Gateway. Requests now carry an authenticated identity, and Baumgarten said the identity policies Flexport already had can be applied to them at the gateway. AI Gateway dates back to September 2023 https://siliconangle.com/2023/09/27/cloudflare-announces-full-stack-platform-deploying-ai-scale/ . The security controls are newer, and Cloudflare has been adding them to its zero-trust platform https://siliconangle.com/2025/08/25/cloudflare-rolls-new-defenses-generative-ai-enterprise/ since August last year. Photo: Wikimedia Commons https://commons.wikimedia.org/wiki/File:Cloudflare office entrance area.jpg A message from John Furrier, co-founder of SiliconANGLE: Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network , where technology leaders connect, share intelligence and create opportunities. 15M+ viewers of theCUBE videos , powering conversations across AI, cloud, cybersecurity and more 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network. Are you AWS customer? Support SiliconANGLE Financially by buying your AWS services from our Marketplace portal page and links. About SiliconANGLE Media SiliconANGLE https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552 , theCUBE Network https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da , theCUBE Research https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f , CUBE365 https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6 , theCUBE AI https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683 and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.