Las Vegas, October 27, 2026 /PRNewswire/ — At Oracle AI World, Oracle today announced the launch of Oracle AI Security Mesh, powered by OpenAI. This new product complements Oracle Cloud Infrastructure (OCI) Identity Assurance, which uses biometrics to verify human identity, and works in tandem with OCI Zero Trust Packet Routing, which protects critical systems and data by enforcing network access policies.
Phil Newman, Senior Vice President of Security and Identity at Oracle, said: “As AI agents take on greater responsibilities, enterprises need security capabilities that can keep pace with how these systems operate. With Oracle AI Security Mesh and Oracle’s identity and cybersecurity capabilities, we are helping organizations identify and address security risks faster, while maintaining control over who can authorize sensitive actions and which systems AI workloads can access.”
Enhance enterprise security with Oracle AI Security Mesh powered by OpenAI.
Oracle states that enterprises can enhance the protection of their applications and infrastructure, regardless of whether their systems run on-premises, on OCI, or on other clouds, by using Oracle AI Security Mesh. Oracle AI Security Mesh combines OpenAI’s advanced cybersecurity models with Oracle’s testing tools and contextual information provided by customers about their own systems. It helps customers identify and remediate vulnerabilities by analyzing application behavior, investigating potential weaknesses, or assisting in the evaluation of proposed fixes.
Based on contextual information from each customer’s system and business priorities, these models investigate how potential weaknesses could be exploited and help security teams prioritize the most critical risks. Oracle AI Security Mesh provides supporting evidence, including reproduction steps and test results, and assists teams in evaluating proposed remediations. Within the customer-approved testing scope, it tests proposed fixes for identified vulnerabilities and assesses their impact on expected application behavior. Customers must approve remediation measures before Oracle AI Security Mesh applies any fix changes. Each agent operates with its own identity, scope of tasks, and just-in-time permissions, while independent monitors detect and block activities that exceed approved boundaries.
Johannes Landgraf, Head of Cybersecurity at OpenAI, said: “Advanced AI is creating new opportunities to help organizations identify and respond to increasingly complex security threats. By combining OpenAI’s cutting-edge models with Oracle’s enterprise security capabilities, we can help security teams investigate complex issues, prioritize critical risks, and accelerate remediation while maintaining the controls they need.”
Protect critical access when AI takes action
Oracle states that as enterprises delegate more tasks to AI agents, OCI Identity Assurance introduces biometric verification to help customers confirm that users are genuine and that human approvals originate from verified individuals. This enhances trust in those approving sensitive operations, thereby protecting sensitive systems and data.
Before performing sensitive actions, such as disbursing payments or changing access permissions, OCI Identity Assurance can use biometric technology to verify the identity and presence of the approver. In AI agent workflows, this helps confirm that approvals originate from verified individuals. OCI Identity Assurance is built into OCI Identity and Access Management and applies across all Oracle Cloud services, including OCI and Oracle Applications.
These biometric capabilities also help protect the employee lifecycle, from hiring to ongoing access to enterprise systems. Oracle states that OCI Identity Assurance combines identity document verification with biometric authentication to help identify impostors, including individuals involved in North Korea’s IT worker programs. Subsequent biometric checks help detect identity theft and account takeover by confirming that the person accessing enterprise resources matches the registered user.
Secure next-generation AI workloads with built-in infrastructure protections
Oracle states that as AI workloads connect to more enterprise systems and handle sensitive data, enforcing boundary controls on accessible content has become more critical than ever. In 2024, Oracle introduced OCI Zero Trust Packet Routing, pioneering a new approach to network security and becoming the first cloud service provider to implement this emerging open standard on its platform. This capability is natively built into OCI’s network architecture, laying the foundation for securing next-generation AI workloads by enforcing access policies beneath the applications and proxies themselves.
OCI Zero Trust Packet Routing enables organizations to express their security intentions through human-readable policies, defining which resources can communicate and which paths can access sensitive data. Traffic to protected resources must be authorized by both OCI Zero Trust Packet Routing policies and existing network controls. These protections remain effective even if network configurations change, helping to prevent sensitive resources from being exposed due to misconfigurations. For AI workloads, this provides an infrastructure-level defense independent of network settings, helping to contain compromised workloads, block unauthorized lateral movement, and restrict data exfiltration paths.
Oracle states that its implementation is based on the open OCI Zero Trust Packet Routing specification developed through industry initiatives and provides an open-source reference implementation to encourage broader adoption and interoperability. As enterprises expand their use of AI, OCI Zero Trust Packet Routing helps them extend access to enterprise data while maintaining clear and enforceable boundaries around protected resources.
About Oracle
Oracle states that the company offers integrated application suites along with secure, autonomous infrastructure on Oracle Cloud. For more information, visit oracle.com. Oracle is listed on the New York Stock Exchange under the ticker symbol ORCL.
About Oracle AI World
Oracle stated that Oracle AI World is a platform for customers and partners to learn about the latest products and technological innovations, observe how AI is being implemented across industries, and connect with experts and peers. Attendees will gain practical advice and insights they can immediately apply within their organizations, and learn how Oracle helps unlock the full potential of AI.
Future Product Disclaimer
The above content is intended to provide a general overview of Oracle’s product direction for informational purposes only and should not be incorporated into any contract. It does not constitute a commitment to deliver any materials, code, or features, and should not be used as a basis for purchasing decisions. Any development, release, timing, or pricing of the Oracle products described herein is subject to change and is solely at the discretion of Oracle Corporation.
Trademark
Oracle, Java, MySQL, and NetSuite are registered trademarks of Oracle Corporation. NetSuite was the first cloud company, ushering in a new era of cloud computing.