Since then, adoption of the service has been rapid. In just the preview phase, hundreds of customers adopted DNS Armor to defend their cloud workloads<\/strong>. During that period, Infoblox has observed the service process more than 22 billion DNS queries and surface over 8.5 million threats<\/strong>, delivering protection at internet scale.<\/p>\n Backed by this strong early customer adoption, DNS Armor<\/strong><\/a> is now generally available, and customers can activate it within the Google Cloud console to start protecting their applications and workloads without additional infrastructure or complexity. Whether you’re running workloads on Google Compute Engine, hosting apps on Google Cloud Storage, or deploying Google\u2019s AI and machine learning models, any Google Cloud workload that has an IP and uses Google Cloud\u2019s default DNS resolver to connect to the internet can benefit from the protection offered by DNS Armor.<\/p>\n Cloud adoption continues to accelerate as enterprises embrace digital transformation, yet this shift has also placed sensitive applications, data and infrastructure squarely in the crosshairs of attackers. Threat actors target cloud workloads that hold PII, intellectual property, and application code. These threats are also becoming more frequent, sophisticated (ransomware attacks surged by 132% in Q1 ’25 aided by AI deception<\/strong><\/a>), and damaging (the global cost of cybercrime is expected to surge to $13.82T by 2028<\/strong><\/a>).<\/p>\n Traditional security detects threats after they impact a workload and are no longer sufficient in an era where adversaries use AI to constantly mutate their malicious campaigns. In addition, most tools don\u2019t monitor DNS activities, which provides early warning signals when it comes to detecting potential malicious activity. Finally, managing disparate non-native security solutions to protect cloud workloads adds complexity.<\/p>\n For years, cybersecurity strategies have been built around a simple “patient zero\u201d model. A new attack hits an organization (also known as \u201cpatient zero\u201d), the rest of the industry learns how it works, and then updates are made to security tools to protect other organizations. This reactive model largely worked in a pre-AI world, where attackers reused malware, attack techniques and domains long enough for security clouds to learn, share indicators, and protect everyone else after the first victim.<\/p>\n That assumption is now broken.<\/p>\n AI has fundamentally changed the economics and execution of cyberattacks. Threat actors are using AI to automate reconnaissance, generate single-use malware, personalize attacks at scale, and continuously mutate campaigns. In this new reality, every organization is effectively \u201cpatient zero.\u201d In fact, 95% of the 25 million domains classified as malicious by Infoblox in a single year were seen at only one enterprise<\/strong>, highlighting how single-use infrastructure has become the norm where domains are weaponized and then disappear.<\/p>\n To combat this shifting threat landscape, security must become preemptive<\/strong>, stopping AI-driven attacks, no matter how many times they evolve and mutate. <\/p>\n DNS Armor brings Infoblox-enabled predictive threat intelligence and analytics directly into Google Cloud, enabling enterprises to secure their cloud workloads with a scalable, easy-to-manage service.<\/p>\n Figure 1. DNS Armor<\/p>\n DNS Armor analyzes DNS queries in real time and uses both threat intelligence feeds and algorithmic detection to identify malicious activity before it can impact workloads. This includes:<\/p>\n By combining ongoing DNS telemetry with machine learning, Infoblox, on average, blocks attacks 68.4 days before other tools detect them with a 0.0002 percent false positive rate. DNS Armor provides this proven threat detection technology to Google customers.<\/p>\n You can learn about the DNS Armor service in depth by viewing the Infoblox-Google webinar<\/strong><\/a> or reading this white paper<\/strong><\/a>. <\/p>\n The general availability of DNS Armor<\/strong> signals that this advanced proactive detection service is ready for production, ready for enterprise use, and ready to help organizations secure their cloud environments with confidence.<\/p>\n Infoblox\u2019s collaboration with Google Cloud goes beyond delivering DNS Armor. Infoblox integrates with Google Security Operations to provide security teams with deeper asset and threat context, enabling organizations to gain a unified and automated response to threats, with enriched visibility across the security stack. On the networking side, infrastructure-free DNS and DHCP services seamlessly integrate with Google Cloud\u2019s Cloud WAN solution for simplified, secure and cost-effective global connectivity.<\/p>\n Learn more about how Infoblox partners with Google Cloud here<\/strong><\/a>.<\/p>\nCloud Adoption and Why Workload Protection Matters Now More Than Ever<\/h3>\n
DNS Armor Delivers Preemptive Security<\/h3>\n
![\"Figure](\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/dns-armor-now-generally-available-figure1-v2.png\")
<\/p>\n\n
Customers Also Benefit from Broader Collaboration Between Infoblox and Google Cloud<\/h3>\n