Scaling BeyondCorp with AI-Assisted Access Control Policies

Google’s SpeakACL is an AI-driven tool that enables developers to define and modify BeyondCorp access control policies using plain English, leveraging PaLM 2 with few-shot in-context learning and fine-tuning to produce syntactically correct, least-privilege ACLs. The prototype is paired with safeguards—automated risk assessment, manual security reviews, linting, unit and integration tests—and includes defenses against sensitive data exposure, prompt injection, and supply chain risks, reflecting a conservative, safety-first approach to applying LLMs in enterprise access control.