CyberArk has announced the general availability of its Secure AI Agents Solution, expanding the CyberArk Identity Security Platform with privilege controls designed to secure autonomous AI agent identities. As organizations increasingly adopt AI agents to automate tasks, these entities become a new class of privileged identities, introducing risks such as agent hallucinations, misuse, and potential takeover by malicious actors, especially when elevated privileges are required. The CyberArk Secure AI Agents Solution addresses these challenges by applying appropriate privilege controls, ensuring AI agents only have necessary access when required, thereby reducing risk and enabling secure scaling of AI initiatives. Matt Cohen, CEO of CyberArk, stated, “As organizations embrace AI agents, both builders and defenders must understand how identity-centric risks evolve when agents require elevated privileges. Without strong discovery, robust privilege controls, and comprehensive lifecycle management, organizations risk losing visibility and opening the door to catastrophic agentic attacks. CyberArk uniquely secures the full spectrum of identities — humans, machines and AI agents — by applying the right level of privilege controls, enabling innovation while maintaining security and compliance.” A recent CyberArk CISO research report, titled “Securing Agentic AI: Identity as the Emerging Foundation for Defense,” indicates that AI agent adoption is projected to reach 76% within three years, yet fewer than 10% of organizations possess adequate security and privilege controls. The report highlights that nearly 40% of enterprise financial institutions and software companies already utilize agentic AI in production. Furthermore, less than one in ten organizations have implemented agentic security controls like risk registries and dynamic authorization at scale. Two-thirds of CISOs in financial services and software sectors rank agentic AI among their top three cybersecurity risks, with over one-third considering it their primary concern. Most anticipate increased cybersecurity spending in the coming year due to AI agent security needs. AI agents operate with autonomy, reasoning, and often require access to sensitive systems, necessitating privileged permissions. Without proper oversight, these privileges can be misused or compromised, potentially leading to severe business and regulatory consequences. The CyberArk Identity Security Platform delivers comprehensive privilege controls across human, machine, and AI identities. The Secure AI Agents Solution extends these capabilities to autonomous AI agents, applying principles of just-in-time access, least privilege, and continuous session monitoring. This unified approach ensures consistent governance, security, and monitoring for all identities, supporting innovation without compromising security or compliance. The CyberArk Secure AI Agents Solution will provide comprehensive agent discovery to automatically detect AI agents across SaaS, cloud, and developer environments, enriching profiles with ownership, roles, and access rights. It will enforce strong authentication and least-privilege access, including zero standing privileges and agent activity auditing, to secure agent access. Real-time threat detection will continuously monitor for anomalies and unauthorized access, triggering automated alerts and rapid responses. Additionally, the solution will offer lifecycle management and compliance features to govern AI agents from creation to decommissioning, supporting evolving regulatory requirements and audit readiness. The general availability of the CyberArk Secure AI Agents Solution is set for December 2025, with subsequent releases planned for 2026. CyberArk (NASDAQ: CYBR) is a global leader in identity security, providing an AI-powered Identity Security Platform that applies intelligent privilege controls to every identity. The platform offers continuous threat prevention, detection, and response across the identity lifecycle, enabling organizations to reduce operational and security risks by implementing zero trust and least privilege principles with complete visibility. It empowers all users and identities—including workforce, IT, developers, and machines—to securely access any resource, located anywhere, from everywhere. CyberArk is headquartered in Newton, Massachusetts, and Petach Tikva, Israel.