For years, security leaders have focused on one major question: Where is our sensitive data?

Although addressing that question is necessary, finding data is only the beginning. Modern enterprise data constantly moves among applications, microservices, cloud workloads, APIs, AI models, and third-party systems.

Today, the core security question has evolved. We no longer just ask where sensitive data lives, but what it is, why it is there, and what happens if one of those systems is compromised.

To answer these questions, organizations must bridge the gap between data intelligence and infrastructure enforcement. The integration between Cyera and Akamai Guardicore Segmentation delivers the solution by turning data classification into operational, data-aware network control.

Bringing data context into microsegmentation

Traditionally, network security and segmentation policies relied on technical attributes: IP addresses, subnets, operating systems, or cloud tags. A database that processed public marketing assets often received the same default network controls as a server that was handling payment card information (PCI) or protected health information (PHI) if they shared an operating system or subnet.

By integrating Cyera’s deep data discovery and classification with Akamai Guardicore Segmentation, organizations can transform static data context into active security controls.

The integration operationalizes governance via:

Automated metadata importing

Automated metadata importing

Context-aware labeling

Context-aware labeling

Data-aware segmentation policy rules

Data-aware segmentation policy rules

Automated metadata importing

Cyera automatically discovers and classifies sensitive data across multicloud and on-premises environments. It maps data sensitivity, data categories (e.g., PII, PCI, IP), and compliance mandates (e.g., the General Data Protection Regulation [GDPR], the Health Insurance Portability and Accountability Act [HIPAA], and Title 23 of the New York Codes, Rules, and Regulations, Part 500 [23 NYCRR 500]).

Context-aware labeling

These insights flow directly into Akamai Guardicore Segmentation as asset labels. A workload is no longer just Production-Web-Server-17; it is dynamically labeled as an asset containing Restricted-Financial-Data or AI-Training-Pipeline.

Data-aware segmentation policy rules

Security teams can create precise policy rules based on what the asset contains. For instance, Akamai Guardicore Segmentation can automatically block lateral communications between unverified workloads and any server bearing a Cyera label for sensitive customer records.

Unifying data sensitivity and exposure context

A critical vulnerability on a workload that contains public data carries a fundamentally different risk profile than the exact same vulnerability on a workload that contains customer identities.

However, evaluating data sensitivity alone still leaves a gap. To accurately prioritize risk, security teams must unite data context with exposure context:

Data sensitivity (Cyera): Identifies what the data is and how valuable or regulated it is

Data sensitivity (Cyera): Identifies what the data is and how valuable or regulated it is

Exposure analysis (Akamai’s Exposure Analysis and Response (ExAR) capabilities): Determines whether an asset is reachable from compromised systems, maps active network dependencies, and measures blast radius

Exposure analysis (Akamai’s Exposure Analysis and Response (ExAR) capabilities): Determines whether an asset is reachable from compromised systems, maps active network dependencies, and measures blast radius

Segmentation (Akamai Guardicore Segmentation): Enforces microsegmentation boundaries to isolate assets and eliminate unauthorized lateral movement

Segmentation (Akamai Guardicore Segmentation): Enforces microsegmentation boundaries to isolate assets and eliminate unauthorized lateral movement

Instead of treating vulnerabilities, network reachability, and data sensitivity as disconnected problems, this unified approach evaluates them as parts of a single risk equation. A vulnerability becomes an immediate priority when exposure analysis shows a direct network path, and Cyera confirms the target contains highly regulated enterprise data.

The AI imperative: Managing dynamic dependency paths

The rapid adoption of enterprise AI and large language models (LLM) pipelines makes this dynamic context even more critical. AI models do not operate in isolation; they continuously pull data across vector databases, software as a service (SaaS) integrations, training repositories, and autonomous agents.

Frameworks like the National Institute of Standards and Technology (NIST) AI Risk Management Framework and regulations such as the EU AI Act emphasize strict data governance across training and inference workflows. When AI models consume data that was never originally intended for AI processing, the risk of accidental exposure or data leaks increases dramatically.

As AI capabilities accelerate the speed at which attackers perform reconnaissance and map attack paths, security teams must first understand these relationships. By pairing Cyera's visibility into AI data stores with Akamai Guardicore Segmentation’s control over workload communications, organizations can allow AI teams to innovate rapidly while ensuring sensitive datasets remain segmented from unauthorized access.

From data discovery to active assurance

Bridging data intelligence and microsegmentation enables a mature, continuous risk model across five distinct stages as shown in the table.

Discover

Identify all workloads, applications, and data repositories

Determine sensitivity, regulatory mandates, and data types

Cyera’s data security posture management

Map active communications, attack paths, and exposure

Akamai’s ExAR capabilities

Enforce microsegmentation policies based on data labels

Akamai Guardicore Segmentation

Continuously validate policy efficacy as workloads scale

Integrated ecosystem

Velocity through precision

Security and compliance should act as guardrails, not speed limits. The easiest ways to eliminate risk are to reject block cloud migrations, restrict AI projects, and stall software deployments. But slowing down the business creates a different kind of enterprise risk.

When security controls are informed by granular data context, enforcement becomes precise rather than broad. Cloud and application teams can modernize at speed, governance, risk, and compliance (GRC) teams gain real-time visibility instead of relying on manual spreadsheets, and CISOs can protect high-value assets without introducing friction across the enterprise.

Knowing where sensitive data lives only answers one question. Knowing where data can travel and what can communicate with it — and automatically enforcing those boundaries — is how modern enterprises can move forward safely.

FAQ

Cyera discovers and classifies sensitive enterprise data across cloud and on-premises environments, then automatically imports these data sensitivity labels into Akamai Guardicore Segmentation as dynamic asset tags. Security teams use these context-aware labels to build automated microsegmentation rules that block lateral network communication to workloads containing sensitive data.

About the author

Clint Huffaker

Clint Huffaker started his career on the customer side, managing enterprise networking and security before moving into presales and architecture. Those early lessons gave him a deep appreciation for what customers do every day — balance innovation, risk, and business pressure. Today, as Director of Product Marketing for Security at Akamai, Clint leads initiatives around Akamai Guardicore Segmentation and Zero Trust.

Protections that teams must routinely disable or bypass to keep the business running are not delivering the outcomes that they need.

Security

Akamai Named a Leader in IDC MarketScape: Worldwide Web Application and API Protection Platforms 2026 Vendor Assessment

IDC MarketScape has named Akamai a Leader in the 2026 MarketScape WAAP assessment.

A site that performs flawlessly in July can buckle under the load it sees when the enrollment window opens in November.

Security

Open Enrollment Is Where Digital Strategy Gets Tested. Are You Ready?

Open enrollment puts payer infrastructure, security, APIs, and member experiences under pressure. Learn six ways that health plans can prepare from edge to core.

Do not let SERVFAIL be your readiness test.

Security