Menlo Security Helps Close the Loop on Zero-Day and AI Agent Attacks with New Google Security Operations Integration

Bilateral integration unites Menlo's browser-native detection with SOC-driven response, extending protection to AI agents built on Google Cloud Gemini Enterprise

SUNNYVALE, Calif.--(BUSINESS WIRE)--Menlo Security, a leader in Browser Security for human and agentic workforces, today announced an integration between Menlo HEAT Shield Agent and Google Security Operations. A security operations (SecOps) analyst can now approve a response to a browser-based threat and have Menlo enforce it automatically, helping to close the gap between threat detection and response. The announcement, made at Google Cloud's Security Innovations Forum 2026, also includes expanded AI agent protection through Menlo Agent Runtime Security (MARS).

Enterprise work happens in the browser, for employees and increasingly for the AI agents acting on their behalf, and attackers have followed. Security teams often catch these threats only after damage is done, and even when they catch them in time, investigation happens in the security operations center (SOC) while enforcement lives in a separate console.

“Security teams have spent years relaying decisions between the SOC and whatever tool actually enforces them,” said Ramin Farassat, Chief Product Officer at Menlo Security. “With this integration, an analyst approves a response in Google Security Operations and Menlo carries it out in the browser automatically. No relay required.”

Menlo HEAT Shield Agent inspects live page content with Google’s Gemini models and blocks zero-day phishing at the point of click, ahead of any reputation feed. Each detection can now stream into Google Security Operations, where a customer’s playbook can correlate it against existing telemetry and propose a response. Once a SecOps analyst approves it, Google Security Operations returns the instruction to Menlo's control plane, which carries out whatever the customer has built it to do, whether that's a policy change, a blocklist update, or a session containment, or any other action supported by Menlo API.

MARS applies the same real-time inspection to AI agents, stripping hidden prompt injection, sanitizing files with Level 3 CDR and enforcing data loss prevention as agents browse, authenticate, and handle files inside the Menlo Cloud. MARS detections can already stream into Google Security Operations today, just like any other Menlo service.

Menlo Orchestrator Agent, included with HEAT Shield Agent and built on Google Cloud Gemini Enterprise, gives administrators a conversational path to the same forensic investigation and enforcement, letting them ask what happened, see who else was exposed, and apply a fix without needing to learn or use the traditional Menlo Admin UI.

About Menlo Security

Menlo Security is the pioneer of the Browser Security Platform (BSP), the industry’s first infrastructure designed to govern a hybrid workforce of humans and autonomous AI agents. By centering the browser as the new enterprise operating system, Menlo provides a "Guardian Runtime" that resolves the unique risks created when AI agents operate at machine-speed without human skepticism. The Menlo platform enables the agentic enterprise to scale AI with confidence, providing universal connectivity to legacy data and unified zero-day threat prevention across every session. Trusted by over 1,000 global enterprises—including eight of the ten largest financial institutions and major government agencies—Menlo protects over 8 million users and millions of simultaneous AI agent sessions. Headquartered in Mountain View, California, and backed by investors including JPMorgan Chase, American Express Ventures, and Vista Equity Partners, Menlo is securing the browser for the agentic age. Learn more at www.menlosecurity.com.