Proofpoint unifies email & AI data security platform

Proofpoint has announced new email and data security products for workplaces that rely on AI agents, bringing email protection and data governance together on one platform.

The launch covers three areas: a unified email security architecture, AI data access governance, and an extension of its data security posture management tools to on-premises systems. The products are due to become available in the second quarter, subject to rollout timing and regional availability.

The move reflects a wider shift in cyber risk as businesses give AI systems greater authority to draft messages, access information and carry out tasks. That trend is changing how security teams assess risk, particularly when automated systems can act quickly across communications and data environments.

Email Focus

A central part of the announcement is the integration of Proofpoint's Secure Email Gateway and its API-based email protection into a single architecture. The combined model is designed to cover both external email traffic and internal email activity through shared threat intelligence and a single management interface.

The aim is to address attacks that spread through internal communications after an initial compromise, including abuse of direct-send routes in cloud email systems. By combining signals from pre-delivery and post-delivery controls, security teams should get a broader view of suspicious behaviour across inbound, outbound and internal email.

"Email remains the front door to the enterprise, especially in environments where people and AI agents act on shared information," said Tom Corn, Executive Vice President and General Manager, Threat Protection Group, Proofpoint. "As organisations delegate more operational decisions to AI systems, security must connect signals across detection layers to understand not just isolated events, but patterns of behaviour and underlying intent. We're advancing collaboration security to reflect how work actually happens, protecting both human users and AI agents operating inside the same communication fabric. Only Proofpoint brings this level of integrated, end-to-end email security to market to deliver 99.999% detection efficacy."

Proofpoint argues that email remains the main route for cyber attacks, even as collaboration tools and AI-based workflows spread across organisations. It is positioning integrated email controls as a way to reduce gaps between perimeter security and monitoring within cloud-based communications platforms.

Data Access

Proofpoint also introduced AI Data Access Governance tools designed to show which people, service accounts and AI agents can access sensitive data across software-as-a-service applications, cloud systems and on-premises environments. The tools can identify stale permissions, orphaned accounts and excessive access rights.

Remediation workflows are intended to automate some response actions that would otherwise require manual ticketing or intervention by security and IT teams. The goal is to give organisations a more up-to-date view of who or what can reach important data, rather than relying only on static entitlement records.

According to Proofpoint, the governance offering draws on identity activity, data sensitivity, access patterns, data loss prevention signals and other indicators through its Data Security Graph. This is intended to help security teams assess access risk with more behavioural context.

Hybrid Visibility

The third part of the launch extends Proofpoint's AI-native data security posture management technology to on-premises environments. Until now, many data discovery and classification tools have focused mainly on cloud systems, leaving blind spots where older infrastructure remains in use.

By expanding coverage to data held on site as well as in the cloud, customers will be able to apply the same discovery and classification model across mixed environments. The aim is to improve visibility over sensitive data as it moves between legacy systems, cloud applications, human users and AI agents.

Proofpoint says fragmented tooling has made it harder for security teams to prioritise risks consistently across hybrid estates. Bringing on-premises data into the same model is intended to support a more unified assessment of exposure and access.

"Data risk no longer sits in one place. It moves across cloud services, on-prem systems, human users, and AI agents," said Mayank Chaudhary, Executive Vice President and General Manager, Data Security Group, Proofpoint. "We're bringing data access governance and hybrid DSPM together within a single platform so organisations can see where sensitive data lives, understand who and what can access it, and take action based on meaningful behavioural signals. In the AI era, data governance ultimately depends on understanding not only the access, but also the intent behind it."

Proofpoint says it works with more than 80 of the Fortune 100, more than 10,000 large enterprises and millions of smaller organisations.