{"slug": "rubrik-unveils-agent-identity-to-govern-ai-agents-one-tool-call-at-a-time", "title": "Rubrik unveils Agent Identity to govern AI agents one tool call at a time", "summary": "Rubrik Inc. unveiled Rubrik Agent Identity at the Black Hat conference in Las Vegas, a service that governs AI agents by granting access one tool call at a time. The service eliminates standing permissions by minting scoped, short-lived tokens for each tool call, and integrates with Okta Inc. and Microsoft Corp.'s Entra ID. Rubrik Zero Labs research found 86% of IT and security leaders expect AI agents to outpace security guardrails within the next year, while only 23% have full visibility into agents running in their environments.", "body_md": "### Rubrik unveils Agent Identity to govern AI agents one tool call at a time\n\n[Rubrik Inc.](https://www.rubrik.com/) today unveiled Rubrik Agent Identity, a service that governs what artificial intelligence agents are allowed to do by granting access one tool call at a time. The company announced the service at the Black Hat conference in Las Vegas.\n\nThe service is an expansion of Rubrik Agent Cloud, the agent governance platform the company launched [in October](https://siliconangle.com/2025/10/22/rubrik-launches-agent-cloud-secure-manage-enterprise-ai-agents/) and made generally available for Anthropic PBC’s Claude [in June](https://siliconangle.com/2026/06/09/rubrik-brings-agent-cloud-claude-launches-rubrik-ai-automate-recovery/). Agent Identity targets the credential layer beneath those deployments. Agents typically inherit the broad, standing permissions built for human employees, which means a single compromised or misbehaving agent can act destructively across software-as-a-service applications, databases and application programming interfaces before anyone notices.\n\n“Agents are no longer just synthesizing information, they are acting on the enterprise on behalf of employees, and the access models we built for humans and static credentials were never designed for autonomous actors,” said Dev Rishi, general manager of AI at Rubrik. “Agent Identity lets enterprises decide who can do what with agents and enforces it per tool call, at the moment of action, with scoped, short-lived access and no standing permissions.”\n\nRubrik is pitching the problem as a “shadow workforce” of unmonitored machine identities. According to research [from Rubrik Zero Labs](https://zerolabs.rubrik.com/reports/state-agent-understanding-adoption-risk-and-mitigation), 86% of global information technology and security leaders expect AI agents to outpace their organization’s security guardrails within the next year, while only 23% say they have full visibility into the agents already running in their environments.\n\nAgent Identity works across three functions: monitoring every agent and Model Context Protocol server at runtime, controlling access per tool call using fine-tuned models and remediating risky actions through identity, audit logs and Rubrik’s Agent Rewind feature. Customers start by building an inventory of active agents, MCP servers, skills and plugins, then scope access to specific servers and tools by user and group using On-Behalf-Of federation, which extends existing identity structures rather than replacing them. Standing permissions are eliminated by minting scoped, short-lived tokens for each individual tool call.\n\nEnforcement happens at an MCP gateway. Every tool call clears three checkpoints before it executes: a behavioral analysis step in which Rubrik’s SAGE governance engine evaluates the intent, input parameters and likely operational impact of the request, a policy check at the infrastructure layer and an identity verification step that authenticates the agent session and issues the token scoped to that call. An unauthorized action, such as a write or modification outside an explicit policy scope, is blocked before execution.\n\nFor actions that clear the gateway and still go wrong, Agent Rewind reverses them. Rubrik has described the feature as the only one of its kind on the market. The company’s own survey work found 88% of leaders are worried about meeting recovery time objectives as agentic threats scale.\n\nAgent Identity integrates with Okta Inc. and Microsoft Corp.’s Entra ID, extending enterprise identities to machine actors without standing up a separate directory. Rubrik did not disclose pricing or a general availability date.\n\nRubrik, which now describes itself as “the Security and AI Operations Company,” moved into agent tooling in earnest with its acquisition of Predibase Inc. in a deal worth between $100 million and $500 million in [June 2025](https://siliconangle.com/2025/06/25/rubrik-acquires-llm-tooling-startup-predibase-reported-100m/). Rishi co-founded Predibase and served as its chief executive.\n\n##### Photo: Rubrik\n\n# A message from John Furrier, co-founder of SiliconANGLE:\n\nSupport our mission to keep content open and free by engaging with theCUBE community. **Join theCUBE’s Alumni Trust Network**, where technology leaders connect, share intelligence and create opportunities.\n\n**15M+ viewers of theCUBE videos**, powering conversations across AI, cloud, cybersecurity and more** 11.4k+ theCUBE alumni**— Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.\n\n# Are you AWS customer? Support SiliconANGLE Financially by buying your AWS services from our Marketplace portal page and links.\n\n**About SiliconANGLE Media**\n\n[SiliconANGLE](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fsiliconangle.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=SiliconANGLE&index=9&md5=646b1b564e2259100a2b8638aab0a552),\n\n[theCUBE Network](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecube.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Network&index=10&md5=7de2a85f95ab4a4a495cede20b8cb1da),\n\n[theCUBE Research](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fthecuberesearch.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+Research&index=11&md5=7bb33676722925eb57d588ec343e4f6f),\n\n[CUBE365](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.cube365.net%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=CUBE365&index=12&md5=d310fb35919714e66ad8d42c9c0c1bc6),\n\n[theCUBE AI](https://cts.businesswire.com/ct/CT?id=smartlink&url=https%3A%2F%2Fwww.thecubeai.com%2F&esheet=54119777&newsitemid=20240910506833&lan=en-US&anchor=theCUBE+AI&index=13&md5=b8b98472f8071b23ebb10ab9a8dd0683)and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.\n\nFounded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.", "url": "https://wpnews.pro/news/rubrik-unveils-agent-identity-to-govern-ai-agents-one-tool-call-at-a-time", "canonical_source": "https://siliconangle.com/2026/08/04/rubrik-unveils-agent-identity-govern-ai-agents-one-tool-call-time/", "published_at": "2026-08-04 13:00:56+00:00", "updated_at": "2026-08-04 13:24:29.664567+00:00", "lang": "en", "topics": ["ai-safety", "ai-policy", "ai-agents", "ai-infrastructure"], "entities": ["Rubrik Inc.", "Rubrik Agent Identity", "Rubrik Agent Cloud", "Anthropic PBC", "Claude", "Dev Rishi", "Rubrik Zero Labs", "Okta Inc."], "alternates": {"html": "https://wpnews.pro/news/rubrik-unveils-agent-identity-to-govern-ai-agents-one-tool-call-at-a-time", "markdown": "https://wpnews.pro/news/rubrik-unveils-agent-identity-to-govern-ai-agents-one-tool-call-at-a-time.md", "text": "https://wpnews.pro/news/rubrik-unveils-agent-identity-to-govern-ai-agents-one-tool-call-at-a-time.txt", "jsonld": "https://wpnews.pro/news/rubrik-unveils-agent-identity-to-govern-ai-agents-one-tool-call-at-a-time.jsonld"}}