Varonis Systems, Inc. adds three new Atlas capabilities

Varonis Systems, Inc. added three new capabilities to Varonis Atlas, extending its coverage to places where employees use AI every day and where AI connects to models, tools, and data.

The work falls to security teams to discover and govern AI applications, agents, and models, whether sanctioned or not, across the browser, endpoint, cloud, apps, and code. Assembling separate point solutions for this is costly, inconsistent, and leaves gaps.

Atlas applies one consistent set of policies across the full AI lifecycle and links AI activity to the Varonis Data Security Platform, so teams can see and control access to sensitive data. Browser Protection finds AI use in browsers, including personal accounts and unsanctioned apps, and blocks unsanctioned AI sites through a lightweight browser extension.

Browser Protection also applies data-aware guardrails to prompts, responses, and attachments. Endpoint Protection finds AI applications, coding agents such as Claude Code, local model files, and MCP servers on laptops and desktops, using either the Varonis endpoint sensor or integrations with CrowdStrike, SentinelOne, and Microsoft Defender.

AI Gateway puts an LLM and MCP gateway in front of AI traffic, letting teams route requests across model providers, cap token spend, and enforce guardrails on prompts, responses, and agent tool calls. Varonis expanded Atlas Agent Intent with an Agent Manifest that defines each agent's purpose, and intent-based access control (IBAC) steps in when an agent drifts from that purpose. All three capabilities are now available.

“You can't control AI you can't see, and you can't see AI by watching one touchpoint at a time,” said Ron Bennatan, VP of AI and Data Security Strategy at Varonis. “Atlas shows security teams the AI tools, agents, and token use across the business, and lets them stop an agent action when it goes beyond its guardrails. Companies can say yes to AI without losing control of their data.”