Home
News
Tech Grid
Interviews
Anecdotes
Think Stack
Press Releases
Articles
  • Data Security

Mimecast Launches Runtime Data Security for AI Risk with Incydr


Mimecast Launches Runtime Data Security for AI Risk with Incydr
  • by: Source Logo
  • |
  • March 25, 2026

Mimecast has expanded its Incydr™ technology with new runtime data security capabilities tailored for the AI era and previewed its new Agent Risk Center at RSAC 2026. These enhancements deliver unified visibility and control over data exposure caused by both employees and autonomous AI agents, addressing a critical security gap as 80% of Fortune 500 companies now run active AI agents while only 14% have full security approval for them.

Quick Intel

  • Mimecast introduces runtime data security through expanded Incydr technology for the AI era
  • New Agent Risk Center provides unified visibility and control over human and AI agent data risks
  • Addresses growing attack surface from AI agents accessing sensitive data via unsanctioned tools and workflows
  • Delivers real-time detection, governance, blocking, and remediation across endpoints, browsers, SaaS, email, and MCP connections
  • Includes adaptive risk scoring, shadow AI detection, granular data-to-agent mapping, and policy-driven governance
  • Agent Risk Center features anomaly detection, governance scorecards, risk heatmaps, and automated remediation workflows

Enterprise data loss has evolved beyond traditional insider threats. AI agents now create new pathways for sensitive data movement through MCP-connected workflows, commercial agents, user-built automations, and shadow AI tools—pathways that legacy security solutions were never designed to monitor.

Runtime Data Security for Human and AI Risk

Mimecast’s enhanced Incydr platform extends beyond insider-led data security to provide comprehensive runtime data security. It combines endpoint and browser intelligence with email and collaboration security to deliver complete ingress-to-egress visibility across the full path of enterprise data movement.

The solution introduces several key capabilities:

Unified Human and Agent Visibility offers a single pane of glass into data loss risks spanning employees and autonomous agents across endpoints, cloud, SaaS applications, email, browsers, commercial AI tools, and MCP connections.

Shadow AI and Unsanctioned Agent Detection identifies out-of-policy commercial agents, unauthorized MCP connections to production systems, and user-built agents using unapproved LLM providers.

Adaptive Risk Scoring continuously evaluates both human users and AI agents based on behavioral anomalies, policy violations, high-risk data access, and compliance posture.

Granular Data-to-Agent Access Mapping provides clear visibility into which agents access specific categories of sensitive data such as customer PII, source code, financial records, and HR data.

Policy-Driven Governance establishes a comprehensive framework for classifying and enforcing acceptable use policies across all AI tools and agents with department-level controls.

Introducing the Mimecast Agent Risk Center

The new Agent Risk Center consolidates fragmented risk signals into a single unified experience. It connects every finding directly to automated agentic workflows for faster response—including notifications, escalations, enforcement actions, and compliance reporting.

Key features include an Anomaly Detection Engine that surfaces high-risk patterns such as unsanctioned tools accessing production databases or executives with overly broad MCP configurations. Governance Scorecards deliver continuous assessment across policy coverage, review currency, human-in-the-loop enforcement, and LLM compliance. Department-Level Risk Heatmaps provide visual analytics for targeted intervention, while Integrated Remediation Workflows enable blocking access, ticket creation, and report generation directly from the interface.

The Agent Risk Center is being previewed at RSAC 2026 with early access planned for September 2026.

"Intent-based detection treats all agents equally. We don't, because the human behind the agent is the signal that changes everything," said Rob Juncker, Chief Product Officer, Mimecast. "Who deployed the agent? What do we already know about them? How is data moving across email, collaboration tools, browsers, SaaS apps, endpoints, and AI-driven workflows — and what intervention is required right now? That's a runtime data security problem, not a model problem."

About Mimecast

Mimecast is a global cybersecurity and data governance leader redefining how organizations secure human and AI risk. Its AI-powered, API-enabled connected human risk platform is purpose-built to protect organizations from the spectrum of cyber threats. Integrating cutting-edge technology with human-centric pathways, our platform provides enhanced visibility and strategic insight. By enabling decisive action and empowering businesses to protect their collaborative environments, our technology safeguards critical data and actively engages employees in reducing risk and enhancing productivity. More than 42,000 businesses worldwide trust Mimecast to help them keep ahead of the ever-evolving threat landscape.

  • CybersecurityData SecurityAI RiskRuntime Security
News Disclaimer
  • Share