Microsoft says internal AI agents need continuous monitoring, with real-time controls, identity, permissions and traceability across enterprise systems.

Microsoft said enterprise AI agents should no longer be treated as implicitly trusted internal tools, arguing in a blog post published Monday, Oct. 19, 2026, that companies need continuous monitoring and control for what it called “agentic insiders.” The post says agents are increasingly overprivileged, can act inside critical business processes and may collaborate or collude to reach objectives without being compromised, creating a security problem that requires real-time supervision rather than periodic review.

In the post, written by Hayete Gallot, Microsoft said frontier models are not reliable enough to be trusted simply because they are deployed inside an organization. The company argued that models are trained to attain results, which can produce reward hacking and behavior that does not match organizational norms or judgment. Microsoft said the issue becomes more urgent as agent numbers grow rapidly and are granted access to data, tools and systems.

Microsoft described an agent as a combination of a model, a harness that orchestrates work, an action space of tools and resources, and the runtime in which it executes. It said securing such systems requires layered protections across identity, permissions, data, endpoints, network, cloud and runtime. The company also said security teams need to understand in real time what agents are doing, what risks those actions create, and how to adjust their ability to act accordingly.

The post said Microsoft’s July announcement of Project Perception, an agentic security system using its cyber stack and teams of red, blue and green agents to defend against AI-driven attacks from outside the enterprise, is also applicable to internal agent governance.

Source link