KnowBe4 has launched Agent Risk Manager, a new solution designed to address the growing security challenges of autonomous AI agents in enterprise environments. As organizations increasingly shift from AI-assisted to agent-managed workflows, securing these agents has become critical for maintaining control and preventing potential risks.
KnowBe4 launches Agent Risk Manager, a new solution designed to secure AI agents and autonomous workforce tools.
The platform provides visibility into AI agent behavior, permissions, and data access across enterprise environments.
Agent Risk Manager helps organizations identify over-privileged AI agents and prevent unauthorized actions.
The solution integrates with existing security awareness training to address human and AI-driven risks.
Early detection features flag anomalous agent activity that could indicate compromise or misconfiguration.
The launch addresses growing enterprise concerns about AI agent security as autonomous systems scale in production.
A new security gap has emerged as workflows shift from AI assisted to agent managed. While many solutions focus on static code scanning or basic API security, KnowBe4’s Agent Risk Manager specifically targets risks associated with agentic behavior. It prevents unauthorized actions such as sharing sensitive information and identifies indirect prompt injections while maintaining a complete inventory of agents.
"The industry has spent years securing the human element, but today, AI agents are the newest members of our workforce," said Greg Kras, chief product officer, KnowBe4. "However, securing the prompt is only half the battle. Our Agent Risk Manager focuses on the output and actions of these agents, ensuring that as they move through your network, they do not become the ultimate shadow IT or a backdoor for sophisticated prompt injection attacks."
KnowBe4’s Agent Risk Manager provides a real-time operational layer that governs how agents behave once they are deployed.
The solution offers several essential capabilities to strengthen AI agent security:
Behavioral Guardrails deliver real-time monitoring of agent actions to prevent unauthorized data exfiltration or jailbroken autonomous execution.
Agentic Identity Governance identifies access permissions and tools that the agent has access to.
Adversarial Simulation for Agents stress-tests AI agents against the latest prompt injection and social engineering tactics used by hackers.
The platform leverages 15 years of behavior data to predict when an agent deviates from safe operating parameters.
Agent Risk Manager includes robust detection features such as machine learning-powered prompt injection detection that identifies jailbreaks, logic overrides, and indirect injections across user messages and tool outputs.
Sensitive Information Detection uses over 20 classifiers to scan for PII and credentials, automatically redacting sensitive data before it reaches the audit log.
Unbounded Consumption Detection monitors for resource abuse and runaway agents to prevent excessive API calls, data queries, and compute costs.
Additional capabilities include automatic agent inventory, a filterable compliance-ready audit log, centralized integration management, and guided onboarding that enables first-agent discovery in minutes.
"We are moving from a world of human risk to universal risk," continued Kras. "Whether it is a human being tricked by a deepfake or an AI agent being manipulated by a malicious prompt, KnowBe4 is the only platform capable of defending both."
A review left by a KnowBe4 customer on TrustRadius praises the company’s overall AI capabilities: “The AI-driven personalization has helped target our account holders with specific information relevant to their areas of interest or specialization. This helps reduce fatigue as we rely on the AI system. KnowBe4 AI helps us solve this problem.”
The launch of the Agent Risk Manager aligns with Identity Management Day. This year’s theme, "Finding Identity: The Search for You, Me, and the Machines," underscores the urgent need to secure not just human identities, but the agentic identities of AI systems.
KnowBe4 Agent Risk Manager strengthens enterprise readiness for the expanding role of autonomous AI agents while maintaining strong security controls across the human and AI workforce.
About KnowBe4
KnowBe4 empowers workforces to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 builds security culture and helps teams manage both human and agent risk. The company delivers a comprehensive, agentic best-of-suite platform for Human Risk Management, creating an adaptive defense layer that reinforces secure behavior against evolving cybersecurity threats. The HRM+ platform includes awareness training, integrated cloud email security, real-time coaching, crowdsourced anti-phishing, AI Defense Agents, and more. As AI becomes increasingly embedded in business operations, KnowBe4 prepares the modern workforce by training both humans and AI agents to recognize and respond to security risks. Through this unified approach, KnowBe4 leads workforce trust management and defense strategies.
