AI agents are delivering real productivity across consumer and enterprise environments. Governance hasn’t kept pace. But how many agents are running in your environment? Who owns them? Which credentials do they hold, and who would notice if they changed? Most of the conversation about agent security focuses on what agents do.
This session looks at what they can access, and why identity is where control starts.
Why enterprise agent deployments are outpacing governance
How missing discovery and ownership are fueling credential sprawl
What joiner-mover-leaver (JML) looks like when the identity is an agent
Why least agency (task-specific, time-bound access) should replace standing credentials
How to tie every agent to a human, go secretless, and respond in real time
Whether you're deploying agents or responsible for securing them, you'll leave with a clear framework for bringing agents under identity governance.
Simon has over 25 years' experience in IAM, cyber and identity security, and is the founder of The Cyber Hut, a specialist research and advisory firm based in the UK. He is the author of "CIAM Design Fundamentals" and "IAM at 2035: A Future Guide to Identity Security," and a Fellow of the Chartered Institute of Information Security.
Micha is co-founder and CEO of Hush Security, where he leads the company's work on securing AI agents and the non-human identities they run on. He previously co-founded Meta Networks, acquired by Proofpoint, and led the research behind Hush's State of MCP report, an analysis of roughly 82,000 public MCP configuration files.