NetEase Yidun, the content safety and risk management division for NetEase's enterprise services, unveiled its native AI product suite at the World Internet Conference Light of Internet Expo in Wuzhen on November 3, 2026, according to Sina Tech and IT Home.
The company asserts that security must shift from controlling what AI says to controlling what it does, as agents gain access to corporate systems, tools, and knowledge bases.
Zhu Haoci, Deputy General Manager of NetEase Enterprise Services and head of Yidun, presented a dual model: using AI to enhance security operations and applying security tools to constrain AI functionality within defined boundaries. He noted that current risks include AI content generation, deepfakes, automated fraud, model jailbreaks, confidential data leaks, and agents performing actions outside their permissions.
The product suite consists of three levels. The first level covers AI content and data security, including AI content analysis and moderation, as well as the CMA moderation agent. The second level focuses on interaction and identity security, encompassing business risk control, device fingerprints, behavioral CAPTCHA, and DeepGuard anti-spoofing protection. The third level is responsible for model and agent security, providing mechanisms for large model protection, an agent security platform, and agent supply chain verification.
The system received first-version certification at the exhibition. At the agent level, protection mechanisms filter model inputs and outputs, while Agent Guard verifies agent actions against user intentions, ensures permission compliance, flags risky tool calls, and blocks behavior.
The agent security platform detects utilized AI assets, scans Skill and MCP supply chains, and protects against confidential data leakage. It targets shadow AI—tools used by employees without IT department awareness—by offering blocking, auditing, alerting, and data masking options.
Yidun provided examples of other product effectiveness. CMA integrates an internal content safety model with specialized smaller models and operates 24/7. The company reported that when analyzing complaints for one client processing over 2.5 million tickets monthly, CMA's initial review combined with human checks reduced the average review time from 35.7 minutes to 12.3 minutes with 99.2% accuracy. DeepGuard, which searches for improbable content rather than just known forgery traces, received top marks in the Chinese Academy of Information and Communications Technology's anti-face spoofing assessment and demonstrated 99% completeness and 96% accuracy against screen replay attacks in phased testing.
At a separate forum, Rao Xiaoyan, Head of Yidun's Content Security Department, stated that malicious instructions can be hidden in web pages, files, APIs, tools, or MCP responses, so systems must differentiate between task data and behavioral commands. She described implementing injection defenses both before model calls and before context assembly, as well as output checking during streaming: questionable content is flagged for review, and high-risk content is rejected.


