Netwrix expands identity security into AI agents on Microsoft Entra ID, aiming to cover more of the cloud attack surface

Netwrix said it is extending its identity security tooling to cover “AI agents” operating in Microsoft’s cloud identity service, Microsoft Entra ID. In a post distributed through Yahoo Finance, the company framed the update as part of a broader effort to push identity protection deeper into where permissions are granted and exercised, not just where user accounts live.

Netwrix’s announcement points to two products as the vehicles for the expansion: Netwrix PingCastle, which is designed for assessing and reporting on Microsoft identity and configuration security, and Netwrix Threat Manager, which the company positions as an ongoing identity threat detection and monitoring capability. Together, the additions are intended to bring AI agent activity under the same kinds of identity visibility and risk controls that organizations already apply to human users.

Microsoft Entra ID is the core identity platform organizations use to authenticate users and control access to Microsoft 365 and other cloud applications. As AI agents increasingly rely on Entra ID to obtain tokens and permissions, identity misconfiguration and overbroad access can become a governance and security concern, especially when agents can act on behalf of teams, systems, or workflows.

The announcement did not provide granular technical specifics in the information available for this write-up. It did not spell out what new detections Netwrix will perform for AI agents, whether the product changes involve new reports, new alert types, or additional data sources, or how administrators will tune the controls for different agent behaviors.

It also did not quantify expected outcomes such as time saved in identity assessments, reductions in false positives for security teams, or performance impacts when monitoring at greater depth. Those details are likely to matter for IT and security buyers evaluating how the tools would fit into existing identity operations.

Contextually, the move reflects a wider industry shift. Identity security has long centered on protecting accounts, groups, and authentication flows. But the rise of AI-driven automation is pushing identity systems into a dual role, serving both as a gatekeeper for humans and as an authorization layer for non-human actors such as service accounts and AI agents.

For Microsoft specifically, Entra ID remains a central control plane for access across the Microsoft cloud ecosystem. Any additional security capabilities from partners that improve visibility into how identities are used, including by automated systems, can support enterprise customers that want consistent governance across mixed workloads.

A key caveat is disclosure. Based on the material available for this story, Netwrix did not describe limits, prerequisites, supported Entra ID features, deployment requirements, or any roadmap elements tied to future AI-agent monitoring. Organizations will likely need to consult Netwrix’s product documentation or contact the vendor to understand exactly how the new AI-agent coverage is implemented and what evidence it provides to security teams.