Ping Identity extends AI-agent controls across AWS, Google Cloud and Cloudflare

Ping Identity has announced integrations with Amazon Web Services, Google Cloud and Cloudflare that extend its Runtime Identity approach into the cloud and edge environments where AI agents are built, deployed and run.

The move builds on the 'identity control plane' strategy Ping outlined earlier this year, which pushes identity beyond one-time authentication into continuous authorisation and enforcement - checking, in real time, what an agent is allowed to do at the moment it acts.

Ping’s argument is that AI agents do not stay inside a single platform or identity boundary: they call APIs, invoke tools, move across cloud workloads, talk to agent gateways and Model Context Protocol (MCP) servers, and reach data at the edge. Rather than embedding controls in every individual agent, tool and MCP server, the company said, enterprises can centralise authorisation and enforcement closer to where the agent actually operates.

On AWS, where Ping is a Security Competency ISV partner, the focus is securing agents built on services such as Amazon Bedrock AgentCore, establishing trusted identities for agents and enforcing delegated, least-privilege access as they work across APIs and multi-account environments.

With Google Cloud’s Agent Gateway, Ping integrates its PingOne Authorize product into the gateway flow to authenticate agents with delegated identities and apply fine-grained policy across agent and tool traffic, including MCP tools.

With Cloudflare, Ping extends enforcement to the edge, applying Zero Trust policies to agent and MCP traffic as agents reach models and enterprise data across Cloudflare’s global network.

“Organisations want to move faster with AI, but they can’t afford to lose visibility or control as AI agents begin operating autonomously across cloud and edge environments,” said Andre Durand, chief executive and founder of Ping Identity.

“These integrations help bring continuous authorisation and real-time policy enforcement into the environments where AI agents are being built and deployed.”

The integrations are available now through the Ping marketplace.