Jev and embedded AI decisions: what security teams need to govern

TL;DR: AI is shifting from chat-style output to embedded decision-making inside APIs, workflows and applications, with models like Jev returning probabilistic security judgments rather than paragraphs, according to Cato Networks. That makes the governance problem control over where AI influences action, what inputs it sees and which deterministic controls can contain its output.

Editorial analysis by NHI Mgmt Group, based on content published by Cato Networks: “Wait, Did We Just Invent Classifiers Again? Introducing Jev, a new way to do AI.”.

Key questions

Q: How should security teams govern AI models that can call tools and access data?

A: Security teams should govern AI models as non-human identities with named owners, limited scope, short-lived credentials, and continuous authorization.

Q: Why does embedded AI in SaaS create a governance gap?

A: Embedded AI creates a governance gap because authenticated access to an application does not reveal how that application will use the data it receives.

Q: How can organisations use probabilistic AI outputs without losing control?

A: Use the model to score risk or recommend a state, then map each outcome to fixed policy and workflow rules.

Practitioner guidance

• Define decision thresholds for AI-assisted triage Map each probability band to a specific outcome such as close, review or contain, and require those mappings to be approved by the control owner.
• Inventory embedded AI across workflows and APIs Locate model calls inside applications, event pipelines and security tooling, then record what data enters the model and what actions its output can influence.
• Separate model scoring from enforcement Keep the model advisory and let deterministic policy, workflow rules and access controls perform the actual enforcement step.

Bottom line: AI decision models shift the security problem from open-ended language generation to bounded operational judgment.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →