Trellix Launches Private Cloud AI Security Solution as 63% of CISOs Lack Visibility into Employee AI Tools

Trellix Addresses Growing AI Security Concerns with On-Premises Solution

Trellix has launched Trellix Wise for Private Cloud, an AI security operations platform designed to run entirely within customer environments, directly addressing concerns that have prevented large organizations from adopting AI-driven security operations1

1

. The release comes as new research reveals 63% of CISOs lack visibility into employee AI tools, creating significant security vulnerabilities2

2

.

David Soto, Trellix's chief information security officer, explained that enterprise holdouts "aren't resistant to the technology, but to the tradeoffs" of sending sensitive telemetry to public clouds, absorbing unpredictable token costs, and operating without transparency into AI decision-making1

1

. The Private Cloud edition eliminates these barriers by deploying across on-premises, air-gapped, hybrid, and private cloud environments where data remains within the security boundary and never reaches external clouds or public LLMs2

2

.

Insider Risk Trends Reveal Urgent Need for AI Governance

The Mind of the CISO report, released alongside the product, surveyed 600 chief information security officers and uncovered alarming insider risk trends. AI-driven or autonomous systems were behind 28% of insider incidents over the past year, yet 99% of CISOs expect AI and automation to be critical or very important to managing insider risk within two years1

1

.

Insider incidents now cost affected organizations an average of $2.6 million, with 98% of companies experiencing at least one AI-linked incident in the past 12 months2

2

. The average organization takes seven hours to spot an insider incident and eight more hours to respond—a 15-hour window that Soto described as "an invitation to attackers who use AI to speed up every stage of an attack"1

1

.

Third-Party AI Tools Emerge as Leading Data Leakage Risk

The research identified third-party AI tools with unclear data handling practices as one of the greatest AI-related data leakage risks, cited by 56% of CISOs surveyed2

2

. Non-human insiders, including AI agents and machine identities, now rank among the top three security risks for 58% of Indian CISOs, compared with 42% globally2

2

.

Balancing insider risk monitoring with privacy and regulatory requirements has become increasingly challenging, with 96% of CISOs finding this balance difficult to maintain2

2

. Organizations that fail to govern AI agents with the same rigor applied to human employees are "operating with an unmonitored insider at scale," Soto argued in the report1

1

.

Private Cloud Solution Delivers Transparency and Predictable Costs

Trellix Wise for Private Cloud addresses these concerns through auditable AI outcomes that include confidence levels and plain-language explanations for every decision, enabling governance without guesswork1

1

. Unlike token-based consumption models, the platform uses predictable pricing, allowing organizations to scale AI adoption without escalating costs2

2

.

Vishal Rao, Chief Executive Officer at Trellix, stated: "The threat landscape has fundamentally shifted, where AI isn't just accelerating attacks; it's commercializing them. Our strategy for the AI era is clear: meet AI-powered threats with AI-powered defense"2

2

. The platform extends a security fabric across existing infrastructure to close the threat detection and response gap while maintaining data sovereignty2

2

.

Regulatory Landscape Shapes Future of AI Security

The research found 98% of respondents see a role for governments or regulators in helping manage insider risk1

1

. In India, 34% of CISOs ranked the Digital Personal Data Protection Act (DPDP Act) among the top three regulations expected to have the greatest positive impact on addressing insider risk2

2

.

One U.S. chief information security officer at a financial operations provider called fragmented state rules "a nightmare" and advocated for "a unified matrix of regulations" to enable companies to "safely use AI for legitimate business purposes"1

1

. Watch for increased regulatory activity around AI governance and data handling practices as organizations navigate these compliance challenges while adopting AI-driven security operations.