AI agents are being developed at a rapid pace and are becoming a new class of identities, giving security teams a way to see and govern them before they become a blind spot. Tenable One Cloud Exposure now supports Microsoft Entra Agent ID identities by automatically discovering and tagging agent identity blueprints, its principals, agent identities, and agent users, allowing security teams to discover more, catch more excessive privileges, and examine blueprints. Now, you can see these identities next to your other non-human identities in Tenable One Cloud Exposure.

Why it’s important:

• Discovery and inventory: You can’t assess what you can’t see. Auto-discovering and tagging each of the four object types, then listing them in the inventory, gives you a baseline of which agents exist and how they relate to each other.
• Permission and configuration auditing: Agents are often over-permissioned because it’s easier to grant broad access than to scope it tightly. Being able to inspect properties lets you catch excessive privileges, risky configurations, and ownerless agents.
• Hierarchy analysis and supply chain risk: Explorer queries let you trace blueprints to their agents (top-down) or agents back to their blueprints (bottom-up). That matters because one compromised or misconfigured blueprint, including one shared across tenants, passes the problem to every agent built from it.

Read the blog and check out the product documentation to learn more.