Cloudflare, Inc. (NYSE: NET) has introduced a new tool called Identity-Aware AI Gateway, giving IT and security teams unprecedented visibility into how employees and automated agents use AI models at work. The feature, announced on August 6, 2026, allows companies to see exactly which user or system sent a request to an AI model, set individual or team-level spending limits, and automatically flag risky content—all without requiring new infrastructure or disrupting workflows.
Accompanying the gateway is a User Insights feature that learns normal AI usage patterns for each person and automated system, alerting teams when behavior deviates from the baseline. This addresses two major challenges: rising AI costs and security blind spots. As AI requests grow cheaper but more numerous, bills can spike unexpectedly, and sensitive data like employee names, passwords, or confidential files may leak to external AI providers unnoticed.
“When security is clunky, it becomes a speed bump that slows down innovation. Right now, companies are wary of surprise AI bills or accidental data leaks, so their instinct is to lock down access and restrict what teams can build,” said Dane Knecht, CTO of Cloudflare. “Connecting our access controls directly to AI Gateway flips that dynamic. Teams get the freedom to work with any AI model they choose. IT gets real-time visibility, guardrails, and the budget controls they actually need.”
Key capabilities of the Identity-Aware AI Gateway and User Insights include:
- See Exactly Who’s Sending What: By integrating with Cloudflare Access, every AI request is tied to a verified identity—whether employee or automated system.
- Catch Unusual Behavior Early: User Insights builds a baseline of each user’s AI activity and alerts IT when spending spikes abnormally.
- Identify Efficiency Opportunities: The system flags when employees use high-powered models for simple tasks that cheaper models could handle.
- Enforce Identity-Based Access: Replace shared API keys with integration into existing Identity Providers (IdP) and Zero Trust (ZTNA) infrastructure, validating user and device posture before sending requests.
- Unified AI Traffic Control: All requests flow through a single point, enabling caching to cut redundant costs, rate limiting to prevent runaway usage, and automatic filters that strip sensitive data before it reaches external AI providers.
Max Baumgarten, Security Engineer at Flexport, commented: “Shared API keys make it almost impossible to tell who is using an AI service or apply the access rules we already have for employees. Putting Cloudflare Access in front of AI Gateway gives each request an authenticated identity and lets us use our existing identity policies at the gateway. Our teams can adopt AI tools without creating a separate authentication system for every client.”
For more details, visit the Cloudflare AI Security blog or the official Cloudflare website.



