Cybersecurity and identity management for AI agents

Identity management and cybersecurity firms are developing new frameworks to secure the growing ecosystem of autonomous AI agents. Initial industry efforts focused on categorizing agents into personal and enterprise groups to better manage access. Companies like JumpCloud expanded capabilities to tie AI agents to human owners, ensuring they follow the same governance and least-privilege rules as human users.

As the technology evolves, the focus has shifted toward mitigating specific operational risks, such as “shadow actors”—uncontrolled agents lacking individual identities—and “agent hijacking,” where malicious instructions are embedded in external data. To counter these threats, experts suggest using “actor tokens” for dynamic, just-in-time permissions. Additionally, infrastructure providers are pivoting toward low-latency AI inference to support the real-time security and operational needs of these autonomous systems.

Recent projections indicate a massive surge in non-human identities, with Palo Alto Networks estimating the machine-to-human identity ratio could reach 109 to 1 by 2026. This proliferation of service accounts, API keys, and cloud workloads has created a governance gap, as traditional security frameworks often prioritize human users. To address this, experts are recommending identity-based microsegmentation and comprehensive inventories to manage the lifecycles of autonomous agents. Furthermore, as organizations move from AI experimentation to business integration, there is an increasing emphasis on maintaining operational sovereignty by ensuring human employees remain the ultimate decision-makers within automated workflows.