Netwrix Bolsters Microsoft Cloud Security with AI Agent Visibility

Netwrix has expanded its PingCastle and Threat Manager tools to provide deeper Microsoft cloud identity security capabilities, including visibility into AI agent identities. Organizations are deploying AI agents faster than they can govern them, with many existing outside established inventory, ownership, and review processes. In fact, a survey by the Cloud Security Alliance found that fewer than a quarter of organizations have a formally adopted policy for creating or removing the identities used by their AI systems.

According to Netwrix's 2026 Data and Identity Security Report, a 43% breach rate among organizations where AI had significantly expanded the number of identities requiring access compared to an 11% breach rate in organizations where AI had not. To address this issue, Netwrix has added new capabilities to its PingCastle and Threat Manager tools.

PingCastle now extends its Microsoft Entra ID coverage to 102 risk checks, assessing identity risk across both on-premises Active Directory and Entra ID using a prioritized approach. The tool also provides visibility into AI agent identities in Microsoft Entra ID, allowing security teams to monitor the access held by these agents.

Threat Manager already provided visibility and monitoring for service accounts through risk insights, abnormal-behavior detection, and attack context. The latest release extends this coverage to AI agents and adds threat detection for Azure Files, protecting against ransomware, abnormal behavior, and high-risk changes such as the creation of open access.