Catching rogue AI behavior with identity-aware analytics

What this post added

This post introduces Identity-aware AI Gateway with Cloudflare Access integration and User Insights. Identity-aware AI Gateway allows for authentication with SAML identity providers, policy enforcement, and custom hostnames for AI Gateway access. It adds verified user IDs to request metadata, enabling per-user spend limits and budgeting. User Insights provides behavioral baselining for each account (person or agent) by analyzing session costs against historical data (p95 session cost over 30 days) and an account-level p99 ceiling to detect anomalous spending patterns. It focuses on identifying deviations from normal behavior, flagging potential compromised credentials or rogue agents without blocking actions or deciding intent.