Google announced three new security agents in preview at Cloud Next 2026: a Threat Hunting Agent that continuously searches for novel attack patterns using Threat Intelligence and Mandiant tradecraft; a Detection Engineering Agent that identifies coverage gaps and writes new detection rules; and a Third-Party Context Agent that enriches alerts with external data. The existing Triage and Investigation Agent moved to general availability after processing over five million alerts in 12 months, compressing a typical 30-minute manual analysis to 60 seconds. All four agents are managed through the Gemini Enterprise Agent Platform, with policy enforcement flowing through a new Agent Gateway layer.