Organizations looking to unlock the power of Enterprise AI Agents, and in a controled and safe way at the speed of AI. Identity is at the heart of it. However, NHI Governance Is Not Enough for Enterprise AI Agents.
The identity industry has responded to the rise of AI agents the same way it responds to every new identity challenge: extend existing frameworks. Map agents to human owners. Enforce least privilege. Govern them like non-human identities.
It is a reasonable instinct. It is also insufficient in ways that matter enormously. Non-human identity security was built for a deterministic world - service accounts, API keys, bots. These identities do what they are configured to do. Their behavior is predictable enough that static governance models work.
Enterprise AI agents are categorically different. Not in degree - in kind. They don't execute fixed instructions. They reason, plan, and adapt in response to context. Their scope shifts with every task. Their behavior at runtime can diverge significantly from anything true at provisioning time. Unlike any identity that came before them, they frequently change their intent, at a pace no governance model built for human movers or machine credentials was designed to handle.
Wrapping them in the same framework you use for a service account isn't wrong. It's just insufficient in precisely the places where risk accumulates.
Segment Resources:
https://go.sans.org/I9L8dM, https://www.linkedin.com/pulse/all-ai-agents-born-equal-your-identity-stack-doesnt-know-difference-1vxtc/?trackingId=TOq%2BMfCbrZUSemfMR0igfQ%3D%3D, https://www.linkedin.com/pulse/nemoclaw-got-us-here-heres-whats-still-missing-aizome-ai-ay7ne/?trackingId=gmE3crsfSFmkql3nApPWXw%3D%3D, https://www.linkedin.com/pulse/beyond-token-why-oauth-solves-wrong-problem-enterprise-ai-agents-aenue/?trackingId=ca95KzWARoJdfWlpmHOFDg%3D%3D, https://www.linkedin.com/feed/update/urn:li:activity:7467945864142172160/
This segment is sponsored by aizome. Visit https://securityweekly.com/aizomeidv to learn more about them!
- 0:00 - Intro
- 0:25 - The Meaning Behind Azone’s Name
- 01:47 - Launching the Azone Platform at Identiverse
- 02:33 - Enterprise AI Agents vs Coding Agents
- 03:55 - Why CISOs Fear Business Logic Agents
- 05:02 - Treating AI Agents Like Employees
- 05:52 - Hybrid Identity and Agent Context
- 07:18 - Why Intent Matters in AI Security
- 08:34 - Understanding Intent Drift
- 10:18 - Fine-Grained Controls for AI Agents
- 10:51 - Agent-to-Agent Identity Chains
- 11:49 - What Mature AI Agent Security Looks Like
- 12:14 - Discovery, Inventory, and Identity for Agents
- 13:12 - Monitoring Intent Changes Over Time
- 13:48 - Offboarding AI Agents and Ownership
- 14:15 - Closing Thoughts
Amir is CEO of aizome, which he co-founded earlier this year. Prior to that Amir was the CEO of AxoniusX, an innovation business unit of Axonius, where he led the launch of the Axonius SaaS Management product in the SSPM domain, and the Axonius Identities product in the IVIP domain. Amir was also CEO of Alcide, Kubernetes security company acquired by Rapid7, and before that the CEO of CyberInt, Threat Intelligece company, which was acquired by Checkpoint. Amir is an angel investor and former board member in a few cybersecurity startups, including Seraphic (acquired by Crowdstrike) and Zecops (acquired by Jamf). Amir also held various roles as VP at Amdocs, including Chief of Staff to the CEO, and VP CBE for the Singtel Group account.
He received his MBA from INSEAD (J06), and has BSc (Cum Laude, Dean’s List) in Industrial Engineering and Management from the Technion – Israel Institute of Technology.
