Simply giving an agent a user account is dangerous. An agent creator is liable for its actions, and the agent has no right to privacy. This requires a new identity and access management (IAM) paradigm, distinct from human user accounts, to manage liability and oversight.

Current agent frameworks create massive security risks because they can't differentiate between a user and the agent acting on their behalf. This results in agents receiving broad, uncontrolled access to production credentials, creating a far more dangerous version of the 'secret sprawl' problem that plagued early cloud adoption.

An AI agent's breach of McKinsey's chatbot highlights that the biggest enterprise AI security risk isn't the model itself, but the "action layer." Weakly governed internal APIs, which agents can access, create an enormous blast radius. Companies are focusing on model security while overlooking vulnerable integrations that expose sensitive data.

Managing human identities is already complex, but the rise of AI agents communicating with systems will multiply this challenge exponentially. Organizations must prepare for managing thousands of "machine identities" with granular permissions, making robust identity management a critical prerequisite for the AI era.

The decentralized adoption of numerous AI tools by employees on their devices creates a new, invisible "Shadow AI" attack surface. Companies lack visibility into these tools, making them vulnerable to compromised AI packages and libraries consumed by unsuspecting users.

AI 'agents' that can take actions on your computer—clicking links, copying text—create new security vulnerabilities. These tools, even from major labs, are not fully tested and can be exploited to inject malicious code or perform unauthorized actions, requiring vigilance from IT departments.

An AI agent capable of operating across all SaaS platforms holds the keys to the entire company's data. If this "super agent" is hacked, every piece of data could be leaked. The solution is to merge the agent's permissions with the human user's permissions, creating a limited and secure operational scope.

The old security adage was to be better than your neighbor. AI attackers, however, will be numerous and automated, meaning companies can't just be slightly more secure than peers; they need robust defenses against a swarm of simultaneous threats.

The CEO of WorkOS describes AI agents as 'crazy hyperactive interns' that can access all systems and wreak havoc at machine speed. This makes agent-specific security—focusing on authentication, permissions, and safeguards against prompt injection—a massive and urgent challenge for the industry.