P0 Security, creator of the Authz Control Plane, today announced new capabilities for agentic runtime access control that help organizations manage agents across the enterprise. The company will showcase the solution at Identiverse 2026, where attendees can see how P0 enforces access policy across the full action chain, establishing fine-grained controls with real-time context. AI agents are actively querying enterprise data, invoking tools, modifying systems and taking action across applications in a single workflow. They typically do so using credentials that belong to the humans or non-human identities that triggered them.
P0 Security unveils agentic runtime access control for AI agent policy enforcement.
Core capabilities include discovering managed and unmanaged agents, enforcing policy at runtime using blended identity context, and proving policy compliance.
P0 evaluates access at the moment an agent acts with automatic revocation once task is complete.
Supports Claude, Microsoft Copilot, Salesforce Agentforce, and custom agent frameworks.
P0 Security will showcase at Identiverse 2026 at Mandalay Bay, Las Vegas, Booth 923.
Gartner states "the primary risk is not what the AI says, but what the AI does."
When access controls are weak for users and NHIs, that weakness flows into every agent action downstream, creating a new class of runtime control failures: agents that act with too much authority and naive, non-deterministic intent. Such actions should be limited, escalated or blocked before execution.
"Claude Code is reshaping our access risk model," says Venkat Venkatraju, Cloud Security Engineer at Splunk. "Engineers could use agents to automate scripts on remote servers or access sensitive data on production databases. One unintended command, rm–rf or mkfs, executed with an engineer's authority, can have catastrophic consequences. Every agent action needs to be evaluated against policy at runtime, not after the fact."
The shift is being recognized across the industry. According to Gartner, "the primary risk is not what the AI says, but what the AI does. The focus must shift from prompt injection to agent behavior analysis and identity traceability. If an AI agent cannot prove who it is acting for and why, it should not get access to tools and data."
P0's Authz Control Plane for Agents builds on the company's foundation in Zero Standing Privilege and Just-in-time access. Rather than treating agent access as a static credential challenge, P0 evaluates access at the moment an agent acts, combining the invoking identity, agent identity, tool authorization and resource entitlements into a single runtime enforcement model, with automatic revocation once a task is complete.
Core capabilities include:
Discover every identity that can access sensitive systems – Surface managed and unmanaged agents, MCP servers, owners and access paths.
Enforce policy at runtime using blended identity context – Evaluate agentic actions against both the agent and the invoking user, scoped to the task and real-time context for time-bound access that's automatically revoked once the work is done.
Prove policy compliance and monitor exceptions continuously – Show who or what invoked the action, which agent acted, what systems and data were touched, and why access was allowed, denied or revoked.
"The first wave of agent adoption focused on what agents could do," said Shashwat Sehgal, CEO and Co-Founder of P0 Security. "The next wave will focus on what agents should be authorized to do. We've spent years helping organizations implement zero-standing privilege across human users and non-human identities. Agentic systems build on those same foundations. Security teams now need a way to evaluate and control access at runtime, scoped to the specific task and tied to an accountable authority. That's the problem we're focused on solving."
At Identiverse, P0 will demonstrate how organizations can discover shadow agents across environments including Claude, Microsoft Copilot, Salesforce Agentforce and custom agent frameworks; enforce Zero Standing Privilege across agents, MCP tools and infrastructure; and audit every authorization decision with a kill switch for rogue actions.
About P0 Security
P0 Security is the unified AuthZ Control Plane for agents and users, helping enterprises secure runtime access for the modern workforce. P0 governs the full action chain across agents and users, enforcing least-privilege policy with real-time context, so organizations can control what agents do and with whose authority before they take action in sensitive systems.
Built on a foundation of Zero Standing Privilege and runtime policy enforcement, P0 replaces broad permissions and static credentials with just-enough privilege, just-in-time access and fully traceability activity – avoiding the access control failures that expose enterprise data and critical systems.
