Why are AI agents considered a security risk in enterprises?

AI agents operate with access to core systems and sensitive data, sometimes reading, writing, and making decisions, but most are unmanaged and lack the governance controls applied to human identities. This creates visibility and governance gaps that expose enterprises to risk.

What is the first step organizations should take to manage AI agents securely?

The first step is discovery—understanding what AI agents exist in the enterprise, who created them, when they were created, what access they have, and what systems they can touch. Without this visibility, effective governance is impossible.

Managing AI Agents as Non-Human Identities

Name: Managing AI Agents as Non-Human Identities
Uploaded: 2026-04-25T19:13:01-04:00
Duration: 1 min 55 s
Description: TL;DR AI agents are proliferating in enterprises and require access to systems and data like human workers, but most operate without governance controls applied to human identities. The core problem is visibility—AI agents are created and forgotten, op...

pathlock

04/25/2026

0 (0%)

Report Like Favorite

TL;DR

AI agents are proliferating in enterprises and require access to systems and data like human workers, but most operate without governance controls applied to human identities.
The core problem is visibility—AI agents are created and forgotten, operating with access to sensitive data and making decisions without proper oversight or management.
Discovery is the foundational first step: enterprises must identify all AI agents, understand who created them, when, and what access they have before implementing governance controls.

Summary

This executive insight addresses the emerging challenge of AI agent proliferation in enterprise environments. Haviv Rosh explains that AI agents function like human workers by requiring access to applications, systems, and sensitive data to perform their tasks. The core problem enterprises face is that most AI agents remain unmanaged—created by humans but operating with access to critical systems and data without the governance controls applied to human identities. This creates significant visibility and governance gaps. Rosh emphasizes that the first step in securing AI agents is discovery: understanding how many agents exist, who created them, when they were deployed, and what access privileges they hold. Without this foundational visibility, organizations cannot implement effective governance controls. The challenge extends beyond AI agents to include service accounts, bots, and other non-human identities that often proliferate unchecked across enterprise systems.

Chapters

0:00 - AI Agent Explosion
0:23 - The Unmanaged Agent Problem
1:04 - Discovery as Foundation

Key Quotes

0:28 "The problem is that most AI agents today are unmanaged. They are created by humans, but then they sit there operating with access to core systems, have access to your sensitive data."
0:50 "The real issue isn't AI as a concept, it's that these agents behave like identities, but enterprises aren't treating them like identities yet."
1:42 "You cannot manage what you cannot see."

Categories:

» AI & Machine Learning
» Webinar Library
» Webinar Library » Pathlock
» Cybersecurity » Identity & Access Management (IAM)
» Data Protection

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

04/29/2026

12:00 PM

04/29/2026

Strategies for Safeguarding AI in Applications, Agents, and APIs

https://www.truthinit.com/index.php/channel/1893/strategies-for-safeguarding-ai-in-applications-agents-and-apis/
04/30/2026

10:00 AM

04/30/2026

Insights from the 2026 Keepit Annual Data Report on SaaS Data Protection

https://www.truthinit.com/index.php/channel/1868/insights-from-the-2026-keepit-annual-data-report-on-saas-data-protection/
04/30/2026

01:00 PM

04/30/2026

The New Economics of a VMware Exit

https://www.truthinit.com/index.php/channel/1880/the-new-economics-of-vmware-exit/
05/06/2026

02:00 AM

05/06/2026

Transforming AI's Potential: Proactively Identifying Attacks Before Breaches Occur

https://www.truthinit.com/index.php/channel/1886/transforming-ais-potential-proactively-identifying-attacks-before-breaches-occur/
05/06/2026

10:00 PM

05/06/2026

World Password Day: Strategies for Managing Your Passwords Effectively

https://www.truthinit.com/index.php/channel/1913/world-password-day-strategies-for-managing-your-passwords-effectively/
05/07/2026

05:00 AM

05/07/2026

World Password Day: Strategies for Managing Your Passwords Effectively

https://www.truthinit.com/index.php/channel/1914/world-password-day-strategies-for-managing-your-passwords-effectively/
05/07/2026

01:00 PM

05/07/2026

World Password Day: Strategies for Managing Your Passwords Effectively

https://www.truthinit.com/index.php/channel/1915/world-password-day-strategies-for-managing-your-passwords-effectively/
05/12/2026

01:00 PM

05/12/2026

Transforming Black Box to Glass Box: Revealing Hidden Threats and AI Risks through Data Lineage

https://www.truthinit.com/index.php/channel/1895/transforming-black-box-to-glass-box-revealing-hidden-threats-and-ai-risks-through-data-lineage/
05/12/2026

11:30 PM

05/12/2026

Effective Strategies for Safeguarding Active Directory and Minimizing Data Exposure

https://www.truthinit.com/index.php/channel/1888/effective-strategies-for-safeguarding-active-directory-and-minimizing-data-exposure/
05/13/2026

01:00 AM

05/13/2026

Transforming the Black Box: Revealing AI Risks and Hidden Threats through Data Lineage

https://www.truthinit.com/index.php/channel/1890/transforming-the-black-box-revealing-ai-risks-and-hidden-threats-through-data-lineage/
05/13/2026

05:00 AM

05/13/2026

Transforming Black Box to Glass Box: Revealing AI Risks and Hidden Threats through Data Lineage

https://www.truthinit.com/index.php/channel/1894/transforming-black-box-to-glass-box-revealing-ai-risks-and-hidden-threats-through-data-lineage/
05/21/2026

11:00 AM

05/21/2026

The Autonomous Era: Orchestrating a Resilient Enterprise

https://www.truthinit.com/index.php/channel/1372/the-autonomous-era-orchestrating-a-resilient-enterprise/