Trellix launches private cloud AI security operations platform
Trellix Wise for Private Cloud lets enterprises run AI security agents on-premises while retaining data sovereignty and avoiding unpredictable costs.
Key points
- Trellix launched Trellix Wise for Private Cloud to allow AI security operations inside customer environments.
- The solution keeps data within the security boundary, avoiding public cloud telemetry transmission.
- A new survey shows 40% of CISOs cite lack of trust in automated decisions as a barrier to adoption.
Trellix launched Trellix Wise for Private Cloud today to enable enterprises to run its artificial intelligence engine for security operations entirely within their own infrastructure. The cybersecurity company introduced the product to address concerns that have prevented large organizations from delegating security operations center work to AI agents, according to SiliconANGLE.
The release targets specific friction points identified by David Soto, Trellix’s chief information security officer, who noted that organizations are not resistant to the technology but rather to its tradeoffs. These tradeoffs include sending sensitive security telemetry to a public cloud, absorbing unpredictable token costs, and operating without visibility into how AI decisions are made, Soto explained.
Context and Background
Trellix stated that every outcome from the private cloud edition includes a confidence level and is explained in plain language for audit and governance purposes. Customers are not billed by the token, addressing one of the primary financial concerns associated with generative AI adoption in security operations, according to Help Net Security.
Vishal Rao, Trellix’s chief executive officer, said the threat landscape has shifted because AI is commercializing attacks rather than just accelerating them. He argued that meeting AI-powered threats requires AI-powered defense, and this new offering allows customers to harness speed and precision while maintaining resilience without compromise.
Who is Affected
The product announcement coincided with the release of Trellix’s “Mind of the CISO” report, which included research from Vanson Bourne Ltd. The firm polled 600 chief information security officers on insider risk during August and September. The report recommends on-premises or private cloud deployments for sensitive workloads to keep data inside the security boundary.
Survey respondents indicated that AI-driven or autonomous systems were behind 28% of insider incidents in the past year. While nearly all respondents expect AI and automation to be critical for managing insider risk within two years, 40% named a lack of trust in automated decision-making as a barrier, according to SiliconANGLE.
Gerard Leymarie, IS/IT Group CISO at Thales Group, described the solution as respecting the need for control and compliance. He noted that the balance between leveraging AI power and maintaining operational integrity is critical for organizations where trust and regulatory requirements are paramount, according to Help Net Security.
What should you do?
Organizations should evaluate whether their current security operations center workflows can benefit from AI assistance while maintaining strict data governance policies. Security leaders should review the transparency and auditability features of any AI tool before deployment, ensuring decisions can be explained in plain language.
Background: Generative AI
Generative AI creates content from prompts. Agentic AI performs actions using tools. The former outputs text or code; the latter changes system states. Understanding this distinction is critical for security architecture, as agentic systems introduce execution risks that pure generation models do not possess.
Read the full guide: Generative AI vs Agentic AI: Architectural Differences and Security Risks
What to do and how to stay safe: Trellix
- Assess current AI security tools to ensure they do not send sensitive telemetry to public cloud environments.
- Verify that AI-generated security decisions include confidence levels and plain-language explanations for audit trails.
- Review internal policies regarding autonomous AI agents to ensure they are governed with the same rigor as human employees.
- Monitor for updates on cost structures, ensuring that AI security operations are not billed by the token to avoid unpredictable expenses.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is Trellix Wise for Private Cloud?
It is an on-premises, federated AI core for agentic security operations that runs inside customer environments to preserve data sovereignty.
Why did Trellix launch this private cloud version?
Trellix launched it to address barriers such as sending data to public clouds, unpredictable token costs, and lack of transparency in AI decisions.
What did the CISO survey reveal about AI adoption?
The survey found that 40% of CISOs lack trust in automated decision-making, while 28% of insider incidents were linked to AI-driven systems.
