# Snowflake's Agent Security Framework _Snowflake unveils its Data-Model-Agent security framework to manage the risks associated with powerful AI agents operating across enterprise data._ **Published:** 2026-06-18 **Source:** https://www.startuphub.ai/ai-news/technology/2026/snowflake-s-agent-security-framework --- AI agents are evolving from passive tools to active enterprise participants, capable of querying sensitive data, executing tasks, and modifying systems. This power necessitates a robust security paradigm beyond traditional models, a challenge Snowflake aims to address with its [Data-Model-Agent security framework](https://www.snowflake.com/content/snowflake-site/global/en/blog/securing-the-agentic-enterprise). The core principle is integrating security where enterprise data, context, and controls already reside, rather than bolting it on post-deployment. AI Agents EvolvingDriver From the article 9+ mentionsAI agents are evolving from passive tools to active enterprise participants, capable of querying sensitive data, executing tasks, and modifying systems.createsNew Security RisksDrivereach agent step presents control points and widens the blast radius of misstepsFrom the article 9+ mentionsAgents combine reasoning, data access, and action, creating a new class of security risks.addressed bySnowflake's FrameworkCoreData-Model-Agent security framework integrates security where data and controls resideFrom the article 8 mentionsThis power necessitates a robust security paradigm beyond traditional models, a challenge Snowflake aims to address with its Data-Model-Agent security framework.includesSecure Data FoundationContextsecuring the core enterprise data that agents will access and interact withFrom the articleWeaknesses in data foundations will be exploited by AI.Protect Model ManipulationContextdefending against prompt injection and other ways models can be trickedFrom the articleModel Layer: Protects the AI model from manipulation and ensures execution stays within the customer's security boundaries.Govern Agent IdentityContextensuring agent actions are attributable, governed, and recoverableFrom the articleAgent Layer: Governs agent behavior, tool usage, identity management, approval workflows, and auditability.Continuous SecurityOutcomeongoing monitoring and adaptation for evolving agentic AI risksFrom the article 9+ mentionsThe core principle is integrating security where enterprise data, context, and controls already reside, rather than bolting it on post-deployment. ## The Agentic AI Risk Landscape Agents combine reasoning, data access, and action, creating a new class of security risks. Each step in an agent's workflow, from reading documents to calling third-party tools, presents a potential control point and widens the blast radius of any misstep. Security leaders must ensure agent actions are attributable, governed, and recoverable, asking critical questions about distinguishing agent from human actions, limiting data/tool access, preventing data exfiltration, and defending against [prompt](/ai-news/cybersecurity/2026/ai-agents-building-enterprise-guardians) injection. ## Snowflake's Data-Model-Agent Framework Snowflake's approach structures [agentic](/ai-news/insights/2026/best-ai-agent-platforms-2026) security into three distinct layers: - **Data Layer:** Enforces least privilege, data masking, movement controls, sovereignty, resilience, and compliance directly where the data resides. - **Model Layer:** Protects the AI model from manipulation and ensures execution stays within the customer's security boundaries. - **Agent Layer:** Governs agent behavior, tool usage, identity management, approval workflows, and auditability. This defense-in-depth strategy is crucial because agentic AI security cannot rely on a single feature. ## Securing the Data Foundation Fundamental data security principles remain paramount. Weaknesses in data foundations will be exploited by AI. Role-based access control, masking, encryption, and auditability become even more critical when agents operate autonomously. Snowflake's zero-copy architecture minimizes data sprawl and policy duplication, strengthening the security posture by reducing the attack surface. ## Protecting Against Model Manipulation Prompt injection, where malicious instructions are inserted into agent prompts, poses a significant threat. Direct injection manipulates models into ignoring instructions, while indirect injection uses external data sources to embed hidden commands. Snowflake Horizon AI Guardrails provide a governance layer to defend against these attacks, configurable within minutes without complex infrastructure changes. Keeping AI close to governed data also reduces reliance on external model providers. ## Governing Agent Identity and Actions When models gain the ability to use tools, they become active actors. Distinct, auditable identities are essential to attribute actions correctly. Snowflake grants AI agents unique identities to ensure queries, API calls, and tool invocations are visible and governable. Tool governance is critical as agents connect to external services, expanding the security perimeter. Snowflake's integration with Natoma allows centralized control and visibility over tool usage, permissions, and approvals. For code-generating agents, sandboxed environments restrict file system and network access, minimizing risk. ## Continuous Security and Resilience Production deployment is just the start. Snowflake's Trust Center offers AI Security Posture Management, identifying vulnerabilities within the customer's trusted boundary. Data movement policies and high-confidence signals alert teams to suspicious activity. AI-assisted remediation and compliance workflows streamline auditing. For high-risk operations, multi-party approval and business justification processes are supported, alongside resilience capabilities like WORM backups and point-in-time recovery. Trust is the bedrock of the agentic enterprise. By integrating security across the full workflow, protecting data, securing models, and governing agents, Snowflake enables organizations to balance innovation with robust security, moving AI agents into production with confidence. --- Original analysis from [startuphub.ai](https://www.startuphub.ai), the #1 AI startup directory.