Stuff like Kong with their API/AI/MCP Gateways (GS use Kong at some level internally as they have done talks on Kong).

And then they will almost certainly have some form of SWG/SSE tool and endpoint/network DLP tool to block stuff.