Skip to content

Topic

AI Agent and Nonhuman Identity Security

A security discipline covering how enterprises authenticate, authorize, and monitor AI agents and other machine identities acting on their systems.

Current stories

securityConfirmed2 publishers

SailPoint extends identity controls to AI agents, with open questions on runtime authorization

SailPoint announced conditional just-in-time access, agent discovery and an agent kill switch at its Navigate conference in Austin. Futurum's analyst calls the bet well positioned but flags runtime authorization and agent coverage as open.

Publishers:futurumgroup.com scworld.com siliconangle.com

Perspective Coverage

3 publishers
Builder
Builder 25%
Operator
Operator 53%
Investor
Investor 22%

Reality

Evidence50
Adoption
Not scored
Hype gap+20
Incentives55
Confidence62
securityOne report1 publisher

SailPoint's agent tools trade permanent access keys for temporary permissions

SailPoint added AI agent discovery and automated access cleanup to its identity platform, aimed at the 79% of enterprises it says run agents in production. Existing customers can bring agent credentials under the platform that governs their staff, on SailPoint's evidence alone so far.

Reality

Evidence25
Adoption
Not scored
Hype gap+55
Incentives85
Confidence35
securityOne report1 publisher

SOC 2 access reviews credit humans with actions their AI agents took

SOC 2 controls CC6.1 to CC6.3 let AI agents act under human credentials without failing a check, a BleepingComputer column argues. A clean review can leave responders unable to say who ran a query, and the criteria already let firms register agents as their own identity.

Reality

Evidence30
Adoption
Not scored
Hype gap+35
Incentives80
Confidence35
productOne report1 publisher

CrowdStrike cleared its own ARR guide by 17% while revenue beat by 2%

CrowdStrike and Okta both credit enterprise agent rollouts for larger commitments. The commitments moved sharply; the quarters they reported barely did.

Publishers:siliconangle.com

Reality

Evidence58
Adoption52
Hype gap+28
Incentives82
Confidence60
investOne report1 publisher

Okta's partners touched all 20 of its biggest deals. Agent identity still has no number.

Partner-led deals and what Okta's COO calls a converting AI-agent pipeline carried an $805 million quarter. Nobody has yet put a figure on what agent identity itself is worth.

Publishers:crn.com

Reality

Evidence42
Adoption38
Hype gap+34
Incentives78
Confidence55
productOne report1 publisher

Portnox adds Defender to its kill switch, conceding agent credentials outlive the login

The access control vendor now takes risk signals from Microsoft Defender, CrowdStrike and SentinelOne to cut an AI agent's connection mid-session. The pitch rests on numbers it did not gather.

Publishers:siliconangle.com

Reality

Evidence24
Adoption10
Hype gap+46
Incentives84
Confidence33