That creates enormous productivity potential, but it also creates a new security problem: Companies now need to protect not only users, devices and applications, but software actors that can take actions on their behalf. An agent may access corporate files, query databases, send emails or execute code. Once it has that level of access, it needs permissions, monitoring and governance. Companies will need to know which agent accessed what information, which systems it connected to, and whether the actions it took were authorized. As enterprises move from experimenting with a few agents to deploying hundreds of them, agent identity will become another important layer of cybersecurity. The challenge is that these identities are not passive. Agents can move between systems, invoke tools and make decisions, which makes controlling them more complex than managing traditional users or service accounts. We are already seeing activity around these areas. Kiteworks recently acquired Israeli...
learn more
