AI is the next big hurdle for security teams, especially on the software development side. Companies need to make sure that users don't use AI to create hacking bots either on purpose or accidentally. They also need AI access controls so that AI can only access the services it should. Otherwise you leave yourself open to bad actors who could force agents to access bad sources. Visibility into AI activity is key to safe use.
"AI agents are a powerful new identity type. They can act independently, on their own or on behalf of a user or a team or a company," said McKinnon. "They can access tools, apps or data, they can plan or complete tasks on their own. The pace here of innovation is absolutely stunning. "These AI agents and the potential here, are getting very, very powerful and it's happening very quickly. "Without identity security AI security collapses. AI security is identity security, you can't be successful in one without the other."
Every enterprise today runs on more than users. Behind the scenes, thousands of non-human identities, from service accounts to API tokens to AI agents, access systems, move data, and execute tasks around the clock. They're not new. But they're multiplying fast. And most weren't built with security in mind. Traditional identity tools assume intent, context, and ownership. Non-human identities have none of those.
In an announcement, Okta's chief technology officer Abhi Sawant said the addition of Axiom will help solve more use cases through additional security controls and connectors to critical infrastructure resources such as databases and Kubernetes. "Axiom's technology will be integrated into Okta Privileged Access, expanding access controls to more sensitive resources that Okta customers can use to further strengthen their identity security fabric, so they can manage the types of privileged access across resources and use cases in their environment," he explained.