Your AI Agents Are Already Inside the Perimeter. Do You Know What They're Doing?
Summary
AI agents are being deployed in enterprises much faster than companies can manage them, creating a visibility problem because traditional identity and access management (IAM, systems that control who can access what) was designed for human users, not continuously-running software agents. About half of enterprise identity activity already happens outside the view of central IAM tools, leaving organizations unable to see what AI agents are operating, what data they access, or what permissions they use. The source describes using observability tools (systems that let you see what's happening) built into applications to discover AI agents and check compliance with security standards like NIST (the National Institute of Standards and Technology).
Solution / Mitigation
The source describes a capability called "Ask Orchid" built into Orchid Security's platform that applies identity observability at the application level to: automatically discover AI agents and their risk profiles, identify where AI agents are not in use for a complete picture, and provide recommended actions for oversight. For compliance checking, the same tool can examine how identity controls are actually implemented inside applications and compare them against NIST requirements.
Classification
Affected Vendors
Original source: https://thehackernews.com/2026/05/your-ai-agents-are-already-inside.html
First tracked: May 6, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 72%