Anthropic’s new enterprise safeguards only cover one piece of a company’s AI stack

Posted in Commentary on September 2, 2026 by itnerd

Anthropic just rolled out Enterprise Frontier Safeguards, giving enterprise customers zero data retention, customer-managed encryption keys, and misuse monitoring that routes flags to the customer’s own review team instead of Anthropic’s, built with input from over 100 customers including Goldman Sachs, Citi, and Wells Fargo, and it comes right after Anthropic disclosed that Claude Mythos 5 took unauthorized action against real people and organizations once it was given live internet access during testing without safeguards.

Arti Raman, CEO, Portal26

“The root cause Anthropic identified is the most interesting part of this. Claude Mythos 5 was told its environment was simulated, then discounted evidence that it actually had live internet access, and acted on that access anyway. That’s a model behaving exactly as designed, in an environment nobody was watching closely enough. It’s the same failure mode we see inside enterprises every day, just at the model layer instead of the employee layer: people, and now agents, will do a lot with access nobody is actively monitoring.

What’s notable about Enterprise Frontier Safeguards is where the flags go. Anthropic is routing misuse detection to the customer’s own review team, not keeping it internal. A vendor watching its own product for misuse is useful, but real governance means the organization actually using the tool can see what’s happening inside it, in their own environment, on their own terms. That’s exactly the gap most companies still have with the AI tools already running inside their organizations today.

This also only covers Claude. Anthropic can protect what happens inside its own model, but most organizations run Claude alongside GPT, Gemini, home-grown agents, and whatever tool an employee signed up for on their own. Enterprise Frontier Safeguards fixes visibility into one instance in a stack that usually has five or six others. Someone still has to be watching every model and every agent running inside the organization, and this only covers one of them.

Zero data retention and customer-managed encryption keys are going to matter most to the banks and healthcare systems on that customer list, because those are the organizations that couldn’t have adopted a tool like this at all without them. But the bigger signal is that even the company building the model needed a live incident, involving real people and organizations, before it built serious monitoring into the product. That’s the pattern everywhere in enterprise AI right now: governance gets built in reaction to an incident instead of ahead of one. The companies that get ahead of that timeline are going to have a real advantage over the ones still finding out what their AI is doing after the fact.”

This is a problem and it is up to Anthropic to answer this problem. Sadly governance is in question. And so is the reactionary nature of this “feature”.

Exposed ransomware server reveals $4 attacks for sale 

Posted in Commentary with tags on September 2, 2026 by itnerd

Cybernews researchers have discovered an exposed server belonging to an affiliate of the Gentlemen ransomware gang. Through the server, the Cybernews team gained a rare inside look at a massive AI-powered ransomware operation.

The discovery shows how AI is changing cybercrime: a single attack costs as little as $0.40–$4.00 in tokens per company, not counting the supporting infrastructure costs. “Ransomware has effectively turned into a passive revenue stream,” said Aras Nazarovas, a security researcher at Cybernews, who discovered the leaking server.

Here are the key findings:

  • The exposed server contained 3.1TB of data stolen from over 30 companies.
  • The brain behind the exposed ransomware operation is an AI agent. Malicious activity relies almost entirely on AI automation, with minimal human oversight.
  • The AI agent can simultaneously compromise and extort multiple targets and is used at all stages of the attack, including determining ransom demands.
  • The compromised companies spanned marketing, healthcare, consulting, compliance, real estate, software development, telecommunications, manufacturing, and transportation, suggesting that attacks are opportunistic.

The findings were responsibly reported to CERT and the police in Lithuania prior to publication, and the authorities shared the information with international partners.

You can find the full Cybernews investigation here:

https://cybernews.com/security/exposed-ransomware-server-reveals-automated-4-dollar-cyberattacks

OpenTable Launches Its Largest Suite of New and Updated Product Features for Restaurants

Posted in Commentary with tags on September 2, 2026 by itnerd

OpenTable today announced its largest suite of new and updated product features for restaurants, many powered by AI and automation. From table automations and AI-powered search distribution to natural-language reporting, this rollout gives OpenTable restaurant partners a more complete and connected operating system to help uplevel their business.

The launch focuses on three priorities for restaurants: driving valuable demand, turning insights into action and connecting to the systems they use every day. The new features and enhancements are designed to reduce manual work, create more opportunities to fill seats and give restaurant teams more time to focus on delivering a memorable dining experience.

The Right Demand: Nothing is More Expensive Than an Empty Seat for a Restaurant

Diners are searching for restaurants in new ways, with AI-driven discovery growing rapidly. Yet, many restaurants struggle to become visible on these new platforms. Restaurants also need better ways of managing their books and optimising to fill seats based on demand. OpenTable is bridging that gap, helping operators fill seats without adding hours of manual administrative work.

  • New integrations with some of the most widely used LLMs: OpenTable has partnerships and integrations with leading AI services and search platforms, including Google (Search, Maps and Gemini), ChatGPT, Microsoft’s Copilot and Perplexity, as well as Amazon’s Alexa+ AI assistant, helping restaurants show up where diners are already searching. This year on OpenTable, LLM integrations drove 17x more seated diners year-over-year, bringing in new diners including those who spent on average 20% more compared to other channels.
  • Get discovered through OpenTable’s AI chat: OpenTable’s AI Concierge helps diners discover restaurants through natural conversations—the way they’d ask a friend. With 500,000+ monthly active global users, AI Concierge gives restaurants another way to reach diners as they decide where to book.
  • Help drive demand with richer, automated profiles: AI-generated restaurant profiles help bring dining rooms and event spaces to life using information from restaurant websites and details operators provide – saving operator time and helping diners choose restaurants with confidence.

The Right Intelligence: From Data to Action

OpenTable is making it easier than ever for restaurant teams to put their data to work, giving operators instant answers, deeper guest insights, and actionable ways to unlock hidden revenue on the floor.

  • Natural language reporting (in testing): With Conversational Reporting, restaurants can ask questions about their data in conversational language and get instant, actionable answers — no dashboards, no exports, no analyst required. For operators who are already stretched thin, the information they need to make better decisions is a question away: operators will be able to ask questions like “Which locations in my group have the largest increase in covers?”
  • Table adjustments based on live demand: OpenTable’s new Table Automations tool automatically adjusts table minimums based on live demand. Since its test phase, there have been over 2 million automations completed, with an initial test saving operators 4.5 hours per month on average.
  • Better insights = better hospitality: New enhancements to OpenTable’s Guest Relationship Management tools (GRM) provide 10x more guest details than a standard guestbook to power personalised hospitality.** This includes features like Group Guest Visit History, which equips staff with cross-location guest profile insights to recognise first-time visitors to new locations like regulars.
  • Uncovering opportunity in the book: Turn Times and Availability Insights show where operators are losing bookable hours and inventory – and how to get them back. In testing, operators reported gaining back, on average, 39 minutes of reservable time per shift.

The Right Connections: A Tech Stack that Works Together

OpenTable is also expanding its integrations so that restaurants can connect reservation and guest data to the

  • Partner integrations and open connectivity: OpenTable’s ecosystem includes more than 200 partners across discovery, demand generation and restaurant operations. This year, OpenTable’s POS partner adoptions increased 40% year-over-year.*
  • More voice AI integrations than any Table Management System (TMS): OpenTable has more than 20 voice AI partners globally to ensure there’s tech that fits each restaurant’s unique needs, booking guests without pulling host stand staff away from the floor or after operating hours. To date, OpenTable has seated 3 million diners across its voice AI partners, an increase of 270% in 2026 compared to the same period in 2025.*

For the full suite of new products and enhancements, visit https://www.opentable.ca/restaurant-solutions/en/product-innovation/

23-year-old Sality botnet finally taken down 

Posted in Commentary with tags on September 2, 2026 by itnerd

CrowdStrike, the DOJ, and law enforcement in Bulgaria, Hungary, and Romania disrupted the Sality peer-to-peer botnet on August 31, more than 15,000 known infected machines were still active worldwide after 23 years of continuous operation since 2003. The takedown turned Sality’s own design against it, replacing trusted peers in the network with sinkholes since infected machines never verified who they were talking to, while the botnet’s most recent payload, a clipboard-hijacking tool called EggJagger, had stolen at least $150,000 in crypto by swapping in attacker wallet addresses.

More info here: Sality botnet infrastructure dismantled in joint global takedown

John Watters, Chairman & CEO, iCOUNTER Had This To Say:

“Twenty-three years is the real headline here. Sality launched in 2003 and outlived multiple generations of malware, multiple law enforcement agents and investigations, and multiple waves of the industry declaring old-school botnets dead. That kind of longevity only happens when a piece of malware keeps finding a new business model. Sality started as a generalist infector and spent its last eight years running EggJagger, quietly swapping cryptocurrency addresses on infected machines. Fifteen thousand known infected machines and $150,000 in known stolen crypto is small by today’s ransomware standards, but the operation didn’t need to be big. It needed patience, and it had it for over two decades.

CrowdStrike didn’t seize a server or arrest an operator. They turned Sality’s own architecture against it, replacing trusted peers in the network with sinkholes, because infected machines never verified who they were talking to in the first place. Shadowserver notified victims through ISPs and CSIRTs, and the DOJ coordinated the legal side with counterparts in Bulgaria, Hungary, and Romania. That combination is why this takedown is likely to hold instead of the infrastructure just resurfacing somewhere else in six months.

Sinkholing stops new instructions from reaching infected machines. It doesn’t clean them. Fifteen thousand known systems are still infected, just quiet now, and that remediation gap is going to outlast this week’s headlines.”

This illustrates that hackers can live for years in a system. Which means that you have to be constantly looking for them to achieve the best results.

Safe Software to Increase Global Headcount by Over 15% as Demand for AI-Ready Data Grows

Posted in Commentary with tags on September 2, 2026 by itnerd

Safe Software today announced it is recruiting for more than 60 roles throughout the remainder of 2026. The hiring will take the company past 400 employees, increasing headcount by over 15%, with new positions across the United Kingdom, the United States and Canada.

The expansion follows a year in which Safe crossed $100 million in annual revenue, growing close to 20 percent year over year and moving ahead of schedule on its target of $250 million by 2028. The company also grew its employee base by over 20% in the same period.

Aligned with the company’s growing revenue trajectory and market expansion, two thirds of the planned roles are revenue-facing across all three markets, spanning sales leadership, revenue operations, enablement, marketing, and customer support. Safe is also growing its product, engineering, and operational teams with open roles in AI enablement, test engineering, DevOps, design, HR, and employee experience.

Safe was named one of BC’s Top Employers for 2026 and one of Canada’s Top Small and Medium Employers for 2026. The company has been a certified B Corporation since August 2024, and has placed more than 400 co-op students since 2010, a third of whom went on to join full time.

Open roles are listed at www.safe.com/careers.

Workers Lose a Day a Week to Sluggish Virtual Desktops

Posted in Commentary with tags on September 2, 2026 by itnerd

Nexthink is warning that organizations risk wasting their technology investment and significant portions of their workforce’s time due to poor virtual desktop performance, with employees losing the equivalent of one full working day every week to sluggish virtual desktops.

Data from the Nexthink VDI Experience platform shows that employees see 20% of their working time impacted by sluggish virtual desktop performance. With the virtual client computing software market valued at $7.12bn in 2025, and VDI accounting for an estimated 59.74% of that spend – approximately $4.25bn – organizations are pouring billions into infrastructure that is undermining productivity.

The scale of the problem is significant. Nexthink data shows 65% of VDI users experience applications running slowly, while 51% of businesses using VDI experience performance issues. Based on Gartner’s forecast that virtual desktops will become the primary workspace for 20% of workers by 2027, and IDC projections putting the global knowledge worker and developer population will be at an estimated 1.04 billion by that year, this poor experience could affect approximately 135 million digital workers worldwide.

The five most common root causes of VDI-related support tickets identified by Nexthink include unstable or inconsistent network conditions, resource contention caused by image design, complicated or outdated login flows and scripts, underpowered or aging endpoint devices, and application behavior changes in virtual environments.

To improve VDI performance and protect the return on investment, organizations should:

  • Build a rounded view of success. Moving beyond cost as the primary measure. Adopt XLA thinking that centers on user outcomes, such as what employees need from their virtual desktop environment and which moments in their working day matter most.
  • Monitor experience, not just infrastructure. CPU, RAM, and uptime metrics do not reflect what users experience. Measure logon times, application launch times, and session responsiveness from the user’s perspective.
  • Measure how users feel. Couple technical data with regular sentiment snapshots through surveys or focus groups. Ask pointed questions about whether employees feel productive in their VDI environment.
  • Review findings and respond visibly. Establish a clear process for acting on experience data. Critically, close the loop with users, showing that their feedback has been heard and acted on is as important as the remediation itself.
  • Work actively on improvements. Prioritize fixes based on what has the greatest user impact at the lowest effort and cost. Take incremental steps and measure each one, so teams can demonstrate progress and accelerate improvement over time.

Methodology

The full workforce calculations are as follows:

  • Gartner’s 2025 Magic Quadrant for Desktop as a Service forecasts that by 2027, virtual desktops will be used as the primary workspace for 20% of workers. IDC projects the global knowledge worker and developer population will grow from 888 million in 2025 to 1.2 billion in 2029. This suggests an annual growth of approximately 78 million and would put the 2027 figure at around 1.04 billion. 
  • Applying the 20% Gartner figure yields an estimated 208 million virtual desktop users by 2027. Of these, approximately 135 million could be affected by slow applications (using Nexthink’s 65% finding).

Equinix Accelerates AI Inference for Enterprises with NVIDIA and Together AI

Posted in Commentary with tags on September 2, 2026 by itnerd

Equinix, Inc. today announced a significant expansion of its longtime collaboration with NVIDIA to deliver Equinix® Inference Exchange, a distributed AI inference program for global enterprises, alongside a new collaboration with Together AI.

As AI scales across models, providers and geographies, where inference runs is a strategic imperative that determines performance, cost and governance. Equinix Inference Exchange will give enterprises a faster path from AI experimentation to production, with secure, low-latency connectivity to the data, users and ecosystem they depend on.

This collaboration brings together NVIDIA’s validated Enterprise Reference Architectures with Together AI’s inference platform, supporting more than 200 open-source models. Delivered through Equinix’s global data centers, it will provide connectivity to clouds, networks and AI providers through Equinix Fabric®.

The solution will be announced today at Equinix Horizon, the company’s inaugural customer and partner event, alongside Equinix® Fabric One™, which will make it easier for enterprises to connect across globally distributed AI environments.

Where Inference Runs Matters

The pace of enterprise AI adoption is outrunning the infrastructure needed to support it. As enterprise AI moves from experimentation to production, inference increasingly needs to run closer to the users, data and applications it serves across clouds, models, providers and geographies. This shift requires enterprises to determine not only how to deploy AI infrastructure, but where it should run and how it connects to the data, applications and workloads it depends on.

Managing these distributed inference deployments introduces significant operational complexity at precisely the moment enterprises need greater control and visibility.

Equinix brings unmatched scale and ecosystem density to this challenge, with more than 280 data centers across 77 metros, 230 cloud on-ramps and over 10,500 businesses interconnected on its neutral exchange. Eight of the top 10 AI model providers and nine of the top 10 AI clouds are deployed with Equinix, underscoring the company’s position at the center of the AI ecosystem.

Built for Choice and Flexibility

Together AI is the latest addition to Equinix’s expansive AI ecosystem, bringing open-model flexibility and choice to enterprises deploying AI at scale. The solution combines three complementary layers designed to simplify distributed AI inference:

  • Equinix provides the infrastructure foundation, including power, advanced cooling and day-two operations, connected through Equinix Fabric to the clouds, networks and AI providers that inference depends on.
  • NVIDIA anchors the build with its Enterprise Reference Architectures and AI infrastructure purpose-built to maximize AI factory throughput and minimize token cost.  
  • Together AI runs the platform on top, supporting both multitenant deployments for shared efficiency and dedicated single-tenant environments for workloads that require dedicated capacity.

Built on Equinix Fabric, the solution will connect to inference providers across major metros worldwide, cutting time-to-first-token. It also will connect to an expansive ecosystem of clouds, networks and AI providers, reducing deployment complexity.

Designed for Modern Enterprise Inference

The solution aims to support a broad range of enterprise inference scenarios, including:

  • Metro edge inference: For organizations that need inference running closer to users and data, enabling lower-latency AI experiences while leveraging the security, operational scale and global reach of Equinix.
  • Open model migration: For enterprises moving workloads from closed, proprietary models to open-source alternatives to control cost and avoid lock-in, the solution will provide a direct, low-friction path to run that migration in production, with Together AI’s open-model platform reachable over the same interconnected fabric enterprises already use to reach their other providers.
  • Sovereign AI: For enterprises operating in regulated industries or specific geographies, the solution will enable AI workloads to run in locations that support data residency and sovereignty requirements, providing a simpler path to deploying AI at scale while maintaining control over where data and inference are processed.

Equinix Inference Exchange will be available starting in Q1 2027.

CPP Investments and Equinix Complete atNorth Acquisition

Posted in Commentary with tags on September 2, 2026 by itnerd

atNorth, the leading Nordic high-density colocation and built-to-suit data center provider, today announced that Canada Pension Plan Investment Board (CPP Investments) and Equinix, Inc. (Nasdaq: EQIX), the world’s digital infrastructure company®, have completed the acquisition of atNorth.

atNorth’s footprint spans across all five Nordic countries, with eight operational data centers and several new projects underway across the territory. This includes sites under development in Sweden, Finland, Norway and Denmark, alongside expansions to existing sites and a strong portfolio of additional development projects.

Together, the operating portfolio and development pipeline provide atNorth with significant capacity to serve growing demand from global enterprise and hyperscale customers across AI, cloud and high-performance computing workloads, supported by advanced cooling technologies, renewable energy integration and heat reuse solutions.

The US$4 billion acquisition, by CPP Investments and Equinix, builds on CPP Investments’ global experience in data center investing and underscores the strategic importance of the Nordics as a leading hub for AI-ready digital infrastructure. atNorth will continue to operate independently under its existing brand, with the backing of its shareholders to accelerate development of its pipeline and expand capacity across the Nordics. Equinix brings complementary digital infrastructure expertise and global customer relationships to support atNorth’s continued growth.

Given the strength of the opportunity and confidence in the partnership since the initial announcement, Partners Group, on behalf of its clients, has elected to re-invest and acquire a 10% stake in atNorth. As a result, CPP Investments will hold a c. 51% controlling stake committing US$1.3 billion, alongside Equinix’s c. 34% committing US$895 million and Partners Group’s c. 10% committing $260 million. The remainder will be held by atNorth’s internal stakeholders, who have chosen to roll over a substantial portion of their equity. The transaction involves a financing package of US$4.1 billion (€3.6 billion), underwritten by a group of European and Canadian lenders to support atNorth’s continuous growth, fund the transaction, as well as the capital required to fund the expansion of the business.

Langflow RCE now under active exploitation

Posted in Commentary with tags on September 2, 2026 by itnerd

Attackers are actively exploiting CVE-2026-0768, a critical unauthenticated RCE flaw in Langflow’s code validator, running credential-harvesting operations that pull OpenAI API keys and AWS access straight out of compromised agentic AI infrastructure, with exploitation clocked within roughly 20 hours of disclosure.

Gidi Cohen, CEO and Co Founder, Bonfy Had This To Say:

“Two critical vulnerabilities, one week, and honestly the wildest part isn’t even the exploitation, it’s that one of them got “fixed” and the fix didn’t work.

VulnCheck tested a patched Rails server (8.1.3.1) assuming the hole was closed. It wasn’t. The libvips file-read got blocked, sure, but the actual RCE mechanism underneath it — a Marshal deserialization gadget, still fires with a valid signature. So the patch shut one door and left the house wide open. Worth remembering next time “patched” shows up in a report and everyone exhales.

Then there’s Langflow. CVE-2026-0768 isn’t some clever zero-day, it’s unvalidated input leading straight to root access. Not fancy. But look at what’s sitting next to it once you’re in: superuser flags, OpenAI keys, AWS credentials, SSH access. Attackers are literally querying for LANGFLOW_SUPERUSER and OPENAI_API* by name within hours of exploiting it. That’s not someone poking around and getting lucky. That’s a playbook, because someone already knows exactly what credentials live in these environments.

And this keeps happening. 12 vulnerabilities exploited since 2025, 15,000+ successful hits across just three CVEs. The attackers aren’t smash-and-grab types either — one crew disabled audit logging specifically so nobody could see what they did next before dropping their payload. That’s patience, not luck.

So the real question is pretty simple: do you actually know what’s exposed in your AI stack right now, or would you find out the same way we all just did, from a threat intel report after the fact?”

You have to test and keep testing. Because you can never count on any fix working properly.

Catalyst by Zoho Solves The Shortfalls of Moving from Coding to Production With an Agent-Ready, Full-Stack Cloud and Built-In Governance

Posted in Commentary with tags on September 2, 2026 by itnerd

Zoho Corporation, a global technology company, today announced major enhancements to Catalyst by Zoho, its Platform-as-a-Service (PaaS), now weaving agentic development capabilities directly into the coding environments developers already use. Additions include Agent Skills, a non-interactive command-line interface (CLI), and Model Context Protocol (MCP) support to Catalyst’s platform, along with new integrations for agentic AI coding assistants including Anthropic’s Claude Code and OpenAI’s Codex. To enhance accessibility and empower future developers, the platform is also offering a free student program that includes full-stack hosting, functions, database, and AI tooling.

Catalyst by Zoho bridges the gap between code generation and reliable deployment by giving agentic AI coding assistants a structured, deterministic way to build and deploy applications. Developers can use the AI coding assistants of their choice while Catalyst provides the underlying full-stack serverless infrastructure and controls, eliminating the need to stitch together multiple cloud services and vendors. This approach simplifies development and future iterations while reducing operational complexity,positioning Catalyst as a reliable partner as technical capabilities and customer needs evolve.

Turning AI-Generated Code Into Production-Ready Applications

AI coding assistants can generate code quickly, but getting it to production requires deep platform knowledge, cloud services, and deployment workflows. Catalyst brings these together on a single serverless full-stack cloud, offering AI coding assistants what they need to build, test, and deploy applications. These capabilities make this possible:

Catalyst Agent Skills gives coding assistants the context they need to understand Catalyst services, architecture, and recommended development patterns. Rather than relying on the model to determine how Catalyst should be used, the Skill guides the assistant toward the appropriate capabilities and workflows. By surfacing only the capabilities relevant to the task, they help assistants make the right application and service choices, optimize token use, and generate accurate, verified output even with lighter models.

The non-interactive CLI allows AI coding assistants to execute multi-step workflows in Catalyst from start to finish without requiring human input at every step. This reduces manual intervention and helps developers move faster from coding to deployment.

The Catalyst MCP server provides AI coding assistants direct access to Catalyst capabilities from the developer’s existing environment. Actions such as creating a database table or adding a column can be performed directly from VS Code, Claude Code, Cursor, or any AI IDE without switching to the Catalyst console, keeping development in one workflow and accelerating delivery.

Orchestration, built into the Skill, ties the three capabilities together. When an AI coding assistant faces a decision about how to execute a request, the Skill routes it deterministically down the CLI or MCP path rather than leaving that choice to the model. This approach lowers the developer’s cognitive load, reduces the risk of incorrect tool selection, and helps produce more reliable, production-ready applications.

Built on Zoho’s Platform with Humans in Mind

While each service may work well independently, managing a fragmented stack can add operational complexity and make security, privacy, and governance harder to maintain. Applications built on Catalyst run inside Zoho’s own data centers and inherit Zoho’s robust security infrastructure, including DDoS protection, SOC compliance, regular vulnerability assessment and penetration testing (VAPT), a web application firewall, and more.

Human oversight is built into the deployment process rather than added afterward, giving organizations greater control as AI becomes part of application development:

Decoupled environments keep development and production separate. Code moves to production by manual promotion only—ensuring the AI agent never touches production, eliminating the risk for error.

Scoped collaborator controls define who—or what—can participate in development and what actions they can perform.

Full audit trails provide records to assist with oversight, including application logs, platform logs and MCP tool-call logs. From this data, developers can track precisely what actions the AI agent took, and when. Every change after launch is versioned, attributable, and reversible.

What’s Next

Catalyst is advancing towards a new era of agentic software development, where developers can collaborate with increasingly capable AI agents to execute sophisticated workflows across the software development lifecycle—all on a governed, full-stack cloud foundation. Forthcoming changes include multi-agent hosting, AI tool connectors, agentic SDLC, and more.

Disclaimer: All trademarks, product names, and company names cited herein are the property of their respective owners.

Pricing and Availability

Catalyst by Zoho offers a monthly free tier for developers to explore the platform, plus $250 in free credits for users who want to go deeper over a six-month period. Catalyst is available for immediate use.

Catalyst continues to offer a straightforward pay-as-you-go pricing model, with every feature bearing a per-unit cost rather than a license fee layered on top of usage. Developers get full visibility into usage from the Catalyst console and can set budget alerts and ceilings to prevent unexpected bills. A structured subscription option is also available for teams that prefer predictable costs.

Catalyst remains completely free for students, no subscription or credit card required to deploy non-commercial applications.

Zoho’s Privacy Pledge

Zoho respects user privacy and does not run on an ad-revenue model in any part of its business, including its free products. The company owns and operates its own data centers, giving it full oversight of customer data privacy and security. More than 150 million users worldwide, across more than 1 million paying organizations, rely on Zoho to run their businesses, including Zoho itself. For more information, visit zoho.com/privacy-commitment.html.