F5 has announced a series of updates to its Application Delivery and Security Platform (ADSP), aimed at helping organisations manage the security implications of AI workloads and encrypted data traffic.
The new capabilities include enhancements to the F5 AI Gateway and the BIG-IP SSL Orchestrator, with a focus on detecting data leaks in real time, enforcing policy controls, and improving visibility into encrypted data flows. The changes are intended to support organisations dealing with increasingly complex hybrid and multicloud environments, particularly as they integrate AI into their operations.
One area of emphasis is the use of AI systems in enterprise settings, often referred to as “Shadow AI” when operated outside official channels. These systems can introduce risks, particularly around the unmonitored handling of sensitive or regulated data. F5’s expanded offerings aim to give security teams tools to detect, classify and block unauthorised AI usage and data exfiltration.
“As organisations move quickly to implement AI, concerns around governance and data protection are increasing,” said Kunal Anand, Chief Innovation Officer at F5. “There is growing demand for tools that can provide insight into how sensitive data is being accessed, processed and shared, particularly in encrypted environments.”
Data leakage detection in AI workflows
F5 plans to roll out data leakage detection and prevention capabilities to its AI Gateway later this quarter. The features, built on technology acquired from LeakSignal, are designed to identify personal or confidential data within AI prompts and responses. Users will be able to set policies that automatically redact, block or log such data.
These tools operate in real time and are intended to offer an additional layer of security across hybrid infrastructure. They also include reporting and logging functions compatible with SIEM platforms for audit and compliance use.
Key capabilities include:
- Identification of sensitive data within AI-generated content
- Policy enforcement across both inbound and outbound AI traffic
- Integration with existing monitoring and logging tools
Enhancements to encrypted traffic inspection
The company also plans to upgrade its BIG-IP SSL Orchestrator by the end of 2025 to improve the management of encrypted traffic associated with AI services. The system will provide real-time inspection and classification of traffic, allowing organisations to detect unauthorised tools or data transfers. The enhancements will include centralised dashboards and audit reporting features.
The updates are intended to help organisations maintain regulatory compliance while continuing to support approved AI applications and services.
