Product Updates Q2 2026: Simplified Security Across Web, Cloud, Data, and AI

Di Thyaga Vasudevan - EVP di Prodotto

July 21, 2026 7 Minute Read

Security teams are operating in an environment that grows more complex every quarter. AI adoption is accelerating, hybrid work remains the norm, and sensitive data continues to spread across cloud applications. At the same time, security teams are expected to deliver stronger protection without increasing operational overhead.

Throughout Q2 2026, Skyhigh Security introduced enhancements designed to make everyday security operations simpler. From expanding browser based protection and strengthening AI governance to streamlining Zero Trust access and making security policies easier to manage, this quarter’s innovations help organizations improve security while reducing administrative effort.

Here’s a look at some of the key enhancements delivered this quarter.

Extending Protection Where Work Happens

Today’s workforce operates almost entirely through the browser. Whether employees use managed devices, contractors access corporate applications, or users work from personal devices, organizations need security that protects data without disrupting productivity.

This quarter, Skyhigh expanded Secure Browser Controls with broader protections for everyday browser activity. Organizations can now prevent unauthorized file uploads, stop sensitive text from being copied into web applications, block sensitive information from being extracted during downloads, and restrict printing and context menu actions. These controls help reduce the risk of accidental or intentional data exposure while allowing users to continue working in their preferred browser.

To improve the user experience even further, Granular Agentless Notifications give administrators greater control over browser notifications. Security teams can suppress known false positives for trusted websites while continuing to enforce Data Loss Prevention policies, reducing unnecessary interruptions without weakening security.

Together, these enhancements help organizations protect sensitive data where work happens every day.

Making Zero Trust Simpler to Deploy and Scale

Delivering secure access should be straightforward for users and manageable for administrators.

This quarter, Skyhigh simplified Zero Trust operations with enhancements across Private Access. Automated DNS Resolution removes the need for manual DNS configuration by intelligently routing requests for services such as Kerberos, LDAP, SMB, and DNS through Private Access Connectors. Users experience seamless connectivity while organizations continue enforcing identity based access policies.

Managing secure application access also becomes easier with enhanced Application Group Management. Administrators can organize applications more efficiently and apply consistent security policies as environments continue to expand.

Together, these enhancements reduce operational complexity while helping organizations scale Zero Trust access with confidence.

Building Security Policies That Scale with Your Business

As organizations adopt new applications, cloud services, and AI technologies, security policies naturally become more sophisticated. Managing that complexity should not require complicated workflows.

Nested Function Support introduces a more flexible approach to policy creation, allowing administrators to build advanced policy logic directly within the cloud policy engine. By supporting nested conditions through an intuitive interface, organizations can create granular policies that are easier to manage, maintain, and scale.

The result is a modern policy framework that gives security teams greater flexibility without increasing administrative complexity.

Turning Data Classification into Intelligent Protection

Classifying sensitive data is only the first step. To reduce risk, organizations need security policies that automatically respond to data sensitivity without relying on manual intervention or user decisions.

By integrating Google Drive labels with Data Loss Prevention (DLP) policies, organizations can apply context-aware controls based on data classifications such as PII, financial information, confidential, or restricted content. Sensitive files are automatically identified and tagged, enabling security policies to enforce the appropriate protections in real time. Whether removing external sharing permissions, blocking access, quarantining files, or deleting unauthorized content, enforcement is driven by the sensitivity of the data and the business context in which it is used.

The result is a smarter, automated approach to data protection that transforms classification into action. Organizations reduce the risk of data exfiltration, simplify audit readiness, and ensure sensitive information remains protected, without disrupting the user experience or adding administrative overhead.

Strengthening Collaboration Security Across Google Workspace

As organizations embrace cloud collaboration, sensitive information is shared more widely across platforms like Google Drive and Google Chat. Maintaining a strong security posture requires continuous visibility into how data is shared, who has access, and where security gaps may exist.

Continuous Security Posture Management for Google Workspace provides a unified view of sharing activity across Drive and Chat, helping organizations identify overexposed data, risky sharing configurations, and policy violations before they become security incidents. By continuously assessing configurations against security best practices and organizational policies, it delivers actionable insights, guided remediation, and ongoing posture improvements to keep collaboration secure without disrupting productivity.

The result is a proactive security framework that helps organizations reduce data exposure, strengthen governance, and enable secure collaboration at scale.

Securing AI Interactions with Intelligent Prompt Protection

As generative AI becomes an integral part of the modern workplace, organizations need effective safeguards against adversarial prompts, harmful content, and misuse. Security controls should enable the safe adoption of AI without limiting innovation, productivity, or the user experience.

AI Prompt Protection provides continuous safeguards against prompt injection attacks, jailbreak attempts, toxic or biased content, malware generation, and other adversarial techniques across AI applications used by employees. It inspects both user prompts and AI-generated responses, while also detecting hidden prompt injection attempts embedded in emails, documents, and other content sources that AI models may reference. By continuously evaluating training data and knowledge repositories for data poisoning and enforcing organizational AI usage policies, it helps ensure AI applications operate securely, responsibly, and within defined business guidelines.

The result is a comprehensive AI security framework that protects enterprise AI interactions, prevents manipulation of AI models, and enables organizations to confidently adopt generative AI while maintaining security, compliance, and trust.

Eliminating Blind Spots in Sensitive Data Discovery 

Every new application, user, and cloud service expands the enterprise data footprint, making sensitive information harder to track. As data continuously moves across API-managed sanctioned services, organizations need a simpler way to automatically discover, classify, and understand their data without relying on predefined discovery policies or manual oversight.

Auto Data Discovery provides an automated approach to continuously discovering and classifying sensitive data across the enterprise, delivering real-time visibility into an organization’s evolving data footprint. As data is created, modified, or moved across sanctioned cloud services, it is automatically identified and enriched with contextual risk insights. Administrators can also focus scans on specific datasets or locations, enabling security teams to understand where critical data resides, how it is exposed, and where action is needed, without the complexity of managing discovery policies.

The result is a modern data discovery framework that gives security teams continuous visibility into sensitive data, helping them uncover hidden risks, prioritize protection efforts, and secure an ever-changing data landscape without added operational complexity. 

Expanding Sensitive Data Visibility Without Alert Fatigue

As organizations generate and store increasing volumes of data across cloud environments, gaining complete visibility into sensitive information becomes more challenging. Expanding data discovery should not create unnecessary alerts or disrupt existing security operations.

Continuous Secondary Data Discovery extends data visibility by identifying and classifying sensitive cloud data that falls outside the scope of primary DLP policies. It continuously updates the Data Explorer with an accurate, unified view of an organization’s data footprint while allowing administrators to precisely define which data classifications and cloud service instances are included in scans. By intelligently separating discovery from policy enforcement, organizations can uncover previously unseen sensitive data without generating unnecessary DLP incidents or impacting near-real-time security workflows.

The result is a more comprehensive data discovery framework that provides deeper visibility into sensitive data, optimizes scanning resources, and enables security teams to strengthen data protection without increasing operational overhead.

Guardando al futuro

Security teams shouldn’t have to choose between stronger protection and operational simplicity.

The innovations delivered throughout Q2 continue Skyhigh Security’s focus on helping organizations secure data, web, cloud, private applications, and AI through a unified platform that’s easier to deploy, manage, and scale.

As the security landscape continues to evolve, Skyhigh remains committed to delivering practical innovations that help organizations stay ahead of emerging risks while keeping everyday operations simple.

Sull'autore

Thyaga Vasudevan

Vicepresidente esecutivo del prodotto

Thyaga Vasudevan è un professionista del software ad alta energia che attualmente ricopre il ruolo di Executive Vice President, Product presso Skyhigh Security, dove dirige il Product Management, il Design, il Product Marketing e le strategie GTM. Con una vasta esperienza, ha contribuito con successo alla creazione di prodotti sia nel software aziendale SAAS (Oracle, Hightail - ex YouSendIt, WebEx, Vitalect) che nell'Internet dei consumatori (Yahoo! Messenger - Voce e Video). Si dedica al processo di identificazione dei problemi e dei casi d'uso degli utenti finali sottostanti ed è orgoglioso di guidare le specifiche e lo sviluppo di prodotti e servizi high-tech per affrontare queste sfide, aiutando anche le organizzazioni a navigare nel delicato equilibrio tra rischi e opportunità.