[](https://www.paloaltonetworks.com/?ts=markdown) * [](https://www.paloaltonetworks.com/?ts=markdown) * Products Products AI Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) Network Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) SASE [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) Security Operations [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) Cloud Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) Observability ^NEW^ [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) Identity Security [![](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [![Overview icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Overview](#products-panel-0) * [![AI Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) AI Security](#products-panel-1) * [![Network Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Network Security](#products-panel-2) * [![SASE icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-prisma-blue.svg) SASE](#products-panel-3) * [![Security Operations icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Security Operations](#products-panel-4) * [![Cloud Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Cloud Security](#products-panel-5) * [Observability ^NEW^](#products-panel-6) * [![Identity Security icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Identity Security](#products-panel-7) [See All Products](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) [![AI Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg) AI Security Discover, assess and protect AI apps, agents and employee use of GenAI tools](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [![Network Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg) Network Security AI-powered NetSec with next-gen firewalls, inline defense and unified management](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Security Operations icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg) Security Operations Stop cyberattackers with the industry's premier platform for autonomous security operations](https://www.paloaltonetworks.com/cortex?ts=markdown) [![Observability \& Remediation NEW icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg) Observability \& Remediation ^NEW^ Prevent downtime with the AI-driven platform that delivers autonomous remediation](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![SASE icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg) SASE Protect with AI, secure AI use and operate with AI using agentic Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) [![Identity Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg) Identity Security Identity security platform to secure every identity: human, machine and agentic](https://www.paloaltonetworks.com/idira?ts=markdown) [![Cloud Security icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg) Cloud Security Prevent risks from code to cloud with the leading agentic cloud security platform](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![AI Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-AIRS-logo-nav.svg)](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) [AI Security Platform](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Gateway](https://www.paloaltonetworks.com/ai-security/ai-gateway?ts=markdown) * [AI Supply Chain Security](https://www.paloaltonetworks.com/ai-security/ai-supply-chain-security?ts=markdown) * [AI Red Teaming](https://www.paloaltonetworks.com/ai-security/ai-red-teaming?ts=markdown) * [AI Runtime Security](https://www.paloaltonetworks.com/ai-security/ai-runtime-security?ts=markdown) * [Agent Identity Security](https://www.paloaltonetworks.com/ai-security/agent-identity-security?ts=markdown) * [AI Posture Management](https://www.paloaltonetworks.com/prisma/cloud/ai-spm?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) Secure GenAI Tools * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) [![Network Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/strata-logo-nav.svg)](https://www.paloaltonetworks.com/network-security?ts=markdown) [Secure the Network](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [OT / Industrial Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [Device \& IoT Security](https://www.paloaltonetworks.com/network-security/device-security?ts=markdown) * [5G Security](https://www.paloaltonetworks.com/network-security/5g-security?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Advanced IP Defense](https://www.paloaltonetworks.com/network-security/advanced-ip-defense?ts=markdown) * [Quantum Safe Security](https://www.paloaltonetworks.com/network-security/quantum-safe-security?ts=markdown) * [Next-Gen Trust Security](https://www.paloaltonetworks.com/network-security/next-gen-trust-security?ts=markdown) [![SASE logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/prisma-sase-logo-nav.svg)](https://www.paloaltonetworks.com/sase?ts=markdown) [Secure Access (SASE)](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma Access (ZTNA)](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) [![Security Operations logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-logo-nav.svg)](https://www.paloaltonetworks.com/cortex?ts=markdown) [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Extended Detection \& Response](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Security Orchestration \& Automation](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Attack Surface Management](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Exposure Management](https://www.paloaltonetworks.com/cortex/exposure-management?ts=markdown) * [Email Security](https://www.paloaltonetworks.com/cortex/advanced-email-security?ts=markdown) * [Threat Intelligence Management](https://www.paloaltonetworks.com/cortex/threat-intel-management?ts=markdown) * [Agentic-first Automation](https://www.paloaltonetworks.com/cortex/agentix?ts=markdown) * [Identity Threat Detection and Response](https://www.paloaltonetworks.com/cortex/itdr?ts=markdown) [Endpoint Security](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Endpoint Protection](https://www.paloaltonetworks.com/cortex/endpoint-protection?ts=markdown) * [Agentic Endpoint Security](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security?ts=markdown) * [Ransomware Protection](https://www.paloaltonetworks.com/cortex/ransomware-protection?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/cortex/digital-forensics?ts=markdown) [Data Security](https://www.paloaltonetworks.com/cortex/data-security?ts=markdown) [![Cloud Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/cortex-cloud-logo-nav.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [Application Security Overview](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Application Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown) * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown) * [Infrastructure-as-Code (IaC) Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown) * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown) * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown) * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown) [Cloud Posture Security Overview](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown) * [Cloud Infrastructure Entitlement Management](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown) * [Data Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown) * [AI Security Posture Management](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown) * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown) * [Cloud Attack Surface Management](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown) [Cloud Runtime Security Overview](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Cloud Detection and Response](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown) * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/kubernetes-and-container-security?ts=markdown) * [Cloud Workload Protection](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown) * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown) * [Serverless Security](https://www.paloaltonetworks.com/cortex/cloud/serverless-security?ts=markdown) [![Observability NEW logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/xcor/cortex-xcor-logo-nav-2.svg)](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) Observability \& Remediation * [AI-Driven Observability](https://www.paloaltonetworks.com/cortex/xcor/ai-driven-observability?ts=markdown) * [Distributed Tracing](https://www.paloaltonetworks.com/cortex/xcor/distributed-tracing?ts=markdown) * [Log Management](https://www.paloaltonetworks.com/cortex/xcor/log-management?ts=markdown) * [Metrics Monitoring](https://www.paloaltonetworks.com/cortex/xcor/metrics-monitoring?ts=markdown) [![Identity Security logo](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/idira-logo-nav.svg)](https://www.paloaltonetworks.com/idira?ts=markdown) [Human Identities](https://www.paloaltonetworks.com/idira/human?ts=markdown) * [Modern PAM](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) [Machine Identities](https://www.paloaltonetworks.com/idira/machine?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * Solutions Solutions By Use Case [![Drive AI Transformation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/ai-page/teaser-block/teaser-icon-2.svg) Drive AI Transformation Scale enterprise AI adoption across employees, applications and agents with confidence and control](https://www.paloaltonetworks.com/ai-security?ts=markdown) [![Accelerate Cloud Transformation icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Accelerate Cloud Transformation Build fast and innovate fearlessly with AI-driven protection from code to cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) [![Secure AI Coding icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure AI Coding Let AI coding do more, with you in control. Protect data, govern agents and control AI costs](https://www.paloaltonetworks.com/secure-ai-coding?ts=markdown) [![Secure Every Identity icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-idira.svg) Secure Every Identity Stop identity-led breaches: Secure human, machine, and agentic identities with zero trust](https://www.paloaltonetworks.com/idira?ts=markdown) [![Enable Autonomous SOC icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Enable Autonomous SOC Fight AI with AI to stop threats at machine speed with the power of analytics and automation](https://www.paloaltonetworks.com/cortex/fight-ai-with-ai?ts=markdown) [![Secure Critical Infrastructure icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Secure Critical Infrastructure Stop machine-speed threats across OT, 5G and IoT with AI-driven cyber defense](https://www.paloaltonetworks.com/securing-critical-infrastructure?ts=markdown) [![Secure the Hybrid Network icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-strata.svg) Secure the Hybrid Network Stay ahead of AI-driven attacks with unified network security across hybrid environments](https://www.paloaltonetworks.com/network-security?ts=markdown) [![Automate Root-Cause Analysis icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-cortex.svg) Automate Root-Cause Analysis Respond autonomously to incidents and accelerate remediation with agentic AI](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [![Frontier AI Defense icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/icon-Unit42.svg) Frontier AI Defense Use defender-grade models to stop AI-speed attacks before they start](https://www.paloaltonetworks.com/unit42/ai-advantage?ts=markdown) * Services Services Security Services [![](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) Customer Services [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Services Overview](#services-panel-0) * [Security Services](#services-panel-1) * [Managed Firewalls](#services-panel-2) * [Customer Services](#services-panel-3) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) [![Security Services logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/unit-logo-dark.svg)](https://www.paloaltonetworks.com/unit42?ts=markdown) Prepare for Emerging Risks * [AI Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ai-security-assessment?ts=markdown) * [Frontier AI](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Respond to Cyber Attacks](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond/incident-response?ts=markdown) * [Digital Forensics](https://www.paloaltonetworks.com/unit42/respond/digital-forensics?ts=markdown) * [Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed Threat Hunting](https://www.paloaltonetworks.com/cortex/managed-threat-hunting?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Attack Surface Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/attack-surface-assessment?ts=markdown) * [Breach Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/breach-readiness-review?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/cloud-security-assessment?ts=markdown) * [Compromise Assessment](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/compromise-assessment?ts=markdown) * [Ransomware Readiness](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/ransomware-readiness-assessment?ts=markdown) * [Supply Chain](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/supply-chain-risk-assessment?ts=markdown) * [Tabletop Exercises](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/tabletop-exercises?ts=markdown) * [Unit 42 Retainer](https://www.paloaltonetworks.com/unit42/retainer?ts=markdown) [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Cyber Risk](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/cyber-risk-assessment?ts=markdown) * [IR Plan Development](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/IR-plan-and-development-review?ts=markdown) * [Security Program Design](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/security-program-design?ts=markdown) * [SOC Assessment](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/soc-assessment?ts=markdown) * [Virtual CISO](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/virtual-ciso?ts=markdown) * [Zero Trust](https://www.paloaltonetworks.com/unit42/build-your-security-strategy/zero-trust-advisory?ts=markdown) Understand the Adversary * [Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Offensive Security](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses/offensive-security-services?ts=markdown) Managed Firewalls * [Managed Firewalls - AWS](https://www.paloaltonetworks.com/network-security/cloud-ngfw?ts=markdown) * [Managed Firewalls - Azure](https://www.paloaltonetworks.com/network-security/cloud-ngfw-for-azure?ts=markdown) [Global Customer Services](https://www.paloaltonetworks.com/services?ts=markdown) * [Education \& Training](https://www.paloaltonetworks.com/services/education?ts=markdown) * [Professional Services](https://www.paloaltonetworks.com/services/consulting?ts=markdown) * [Success Tools](https://www.paloaltonetworks.com/services/customer-success-tools?ts=markdown) * [Support Services](https://www.paloaltonetworks.com/services/solution-assurance?ts=markdown) * [Customer Success](https://www.paloaltonetworks.com/services/customer-success?ts=markdown) * Industries Industries [![Financial Services icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/financial-icon-2.svg) Financial Services Secure with AI cybersecurity, fraud and ransomware prevention, compliance, and customer data protection](https://www.paloaltonetworks.com/industry/financial-services?ts=markdown) [![Manufacturing icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/manufacturing-icon-2.svg) Manufacturing Secure with OT security, ransomware defense, industrial cybersecurity, supply chain resilience, and continuity](https://www.paloaltonetworks.com/industry/manufacturing?ts=markdown) [![Retail and Hospitality icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/retail-icon-2.svg) Retail and Hospitality Secure with payment security, PCI compliance, ransomware and fraud prevention, and data protection](https://www.paloaltonetworks.com/industry/retail?ts=markdown) [![Healthcare and Life Sciences icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/healthcare-icon-2.svg) Healthcare and Life Sciences Secure patient and clinical data, medical device security, ransomware defense, and HIPAA compliance](https://www.paloaltonetworks.com/industry/healthcare?ts=markdown) [![Public Sector icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/public-sector-icon-2.svg) Public Sector Secure with Zero Trust, cyber defense, compliance, infrastructure protection, and citizen data security](https://www.paloaltonetworks.com/industry/public-sector?ts=markdown) [![Utilities icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/utilities-icon-2.svg) Utilities Secure with power grid protection, OT network security, ransomware defense, and critical infrastructure security](https://www.paloaltonetworks.com/industry/electric-utilities?ts=markdown) [![Transportation icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/transportation-icon-2.svg) Transportation Secure OT and connected infrastructure protection, ransomware defense, supply chain security, compliance](https://www.paloaltonetworks.com/industry/transportation-security?ts=markdown) [![Small and Medium Business icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/smb-icon-2.svg) Small and Medium Business Secure against cyber threats using AI-powered endpoint, network, browser, cloud, and MDR](https://www.paloaltonetworks.com/industry/small-medium-business-portfolio?ts=markdown) * Partners Partners NextWave * [Partner Program](https://www.paloaltonetworks.com/partners/nextwave-partner-portal-login?ts=markdown) * [Become a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=becomepartner) * [Request Partner Portal Access](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerregistration?type=requestaccess) * [Partner Portal Login](https://www.paloaltonetworks.com/partners/nextwave-partner-portal?ts=markdown) * [Find a Partner](https://paloaltonetworks.my.site.com/NextWavePartnerProgram/s/partnerlocator) Partner Ecosystem [Explore All Partners Find the right partner network tailored to your business needs, cloud environments, and security requirements](https://www.paloaltonetworks.com/partners?ts=markdown) [Cloud Service Partners Bring cloud native security and compliance to the entire development lifecycle](https://www.paloaltonetworks.com/partners/nextwave-for-csp?ts=markdown) [Frontier AI Alliance Outpace today's cyberattacks through a global ecosystem of leaders orchestrating unified defenses](https://www.paloaltonetworks.com/frontier?ts=markdown) [Global System Integrators Speed and secure digital transformation with the industry's best technology, people and intelligence](https://www.paloaltonetworks.com/partners/nextwave-for-gsi?ts=markdown) [Managed Security Service Providers Gain valuable resource oversight to help your businesses administer security strategies](https://www.paloaltonetworks.com/partners/managed-security-service-providers?ts=markdown) [Resellers Deliver the most comprehensive cybersecurity portfolio while expanding opportunities and profitability](https://www.paloaltonetworks.com/partners/resellers?ts=markdown) [Service Providers Protect mobile users, devices and applications with effective, flexible and easy to deploy cybersecurity](https://www.paloaltonetworks.com/partners/service-providers?ts=markdown) [Technology Partners Advance security and transformation with innovative technology partner integrations](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown) * Resources Resources ![Learn icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/resource-library-icon.svg) Learn * [Resource Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Analyst Reports](https://www.paloaltonetworks.com/resources/research?ts=markdown) * [Customer Stories](https://www.paloaltonetworks.com/customers?ts=markdown) * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Threat Vector Podcast](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [Unit 42 Threat Research](https://unit42.paloaltonetworks.com/) * [Knowledgebase](https://knowledgebase.paloaltonetworks.com/) * [Technical Documentation](https://docs.paloaltonetworks.com/) ![Engage icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/engage-icon-2.svg) Engage * [Webinars](https://www.paloaltonetworks.com/resources/webinars?ts=markdown) * [Demos](https://www.paloaltonetworks.com/demos?ts=markdown) * [Test Drive](https://www.paloaltonetworks.com/resources/test-drives?ts=markdown) * [On-Demand](https://www.paloaltonetworks.com/ondemand?ts=markdown) ![Connect icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/connect-icon-2.svg) Connect * [Executive Briefings](https://www.paloaltonetworks.com/about-us/executive-briefing-program?ts=markdown) * [Events](https://events.paloaltonetworks.com/) * [Live Community](https://live.paloaltonetworks.com/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) ![Discover icon](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/logos/nav/discover-icon-2.svg) Discover * [Why Palo Alto Networks?](https://www.paloaltonetworks.com/why-paloaltonetworks?ts=markdown) * [Platform Approach](https://www.paloaltonetworks.com/why-paloaltonetworks/platformization?ts=markdown) * [Awards \& Recognition](https://www.paloaltonetworks.com/about-us/awards?ts=markdown) * [Global Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Cloud Locations](https://www.paloaltonetworks.com/products/regional-cloud-locations?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Trust 360 Program](https://www.paloaltonetworks.com/resources/whitepapers/trust-360?ts=markdown) ![Company icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default-orange.svg) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Management Team](https://www.paloaltonetworks.com/about-us/management?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en) * [Culture \& Benefits](https://jobs.paloaltonetworks.com/en/culture/) * [Ethics \& Compliance](https://www.paloaltonetworks.com/company/ethics-and-compliance?ts=markdown) * [Office Locations](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * ![search magnifying glass](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg) * us Language * USA (ENGLISH) * [AUSTRALIA (ENGLISH)](https://www.paloaltonetworks.com.au/cyberpedia/what-is-agentic-ai-governance) * [BRAZIL (PORTUGUÉS)](https://www.paloaltonetworks.com.br/cyberpedia/what-is-agentic-ai-governance) * [CANADA (ENGLISH)](https://www.paloaltonetworks.ca/cyberpedia/what-is-agentic-ai-governance) * [CHINA (简体中文)](https://www.paloaltonetworks.cn/cyberpedia/what-is-agentic-ai-governance) * [FRANCE (FRANÇAIS)](https://www.paloaltonetworks.fr/cyberpedia/what-is-agentic-ai-governance) * [GERMANY (DEUTSCH)](https://www.paloaltonetworks.de/cyberpedia/what-is-agentic-ai-governance) * [INDIA (ENGLISH)](https://www.paloaltonetworks.in/cyberpedia/what-is-agentic-ai-governance) * [ITALY (ITALIANO)](https://www.paloaltonetworks.it/cyberpedia/what-is-agentic-ai-governance) * [JAPAN (日本語)](https://www.paloaltonetworks.jp/cyberpedia/what-is-agentic-ai-governance) * [KOREA (한국어)](https://www.paloaltonetworks.co.kr/cyberpedia/what-is-agentic-ai-governance) * [LATIN AMERICA (ESPAÑOL)](https://www.paloaltonetworks.lat/cyberpedia/what-is-agentic-ai-governance) * [MEXICO (ESPAÑOL)](https://www.paloaltonetworks.com.mx/cyberpedia/what-is-agentic-ai-governance) * [SINGAPORE (ENGLISH)](https://www.paloaltonetworks.sg/cyberpedia/what-is-agentic-ai-governance) * [SPAIN (ESPAÑOL)](https://www.paloaltonetworks.es/cyberpedia/what-is-agentic-ai-governance) * [TAIWAN (繁體中文)](https://www.paloaltonetworks.tw/cyberpedia/what-is-agentic-ai-governance) * [UK (ENGLISH)](https://www.paloaltonetworks.co.uk/cyberpedia/what-is-agentic-ai-governance) * Accounts \& Support Accounts \& Support * Accounts * Customer * Partner * Employee * [Login to Download](https://www.paloaltonetworks.com/login?ts=markdown) * [Become a Member](https://www.paloaltonetworks.com/login?screenToRender=traditionalRegistration&ts=markdown) * Support * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [What's New](https://www.paloaltonetworks.com/resources?ts=markdown) * [Get Support](https://support.paloaltonetworks.com/SupportAccount/MyAccount) [Under Attack?](https://www.paloaltonetworks.com/unit42/contact-unit42?ts=markdown) * [Demos and Trials](https://www.paloaltonetworks.com/get-started?ts=markdown) [Introducing Cortex XCOR: Observability, reimagined. Discover now.](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) [](https://www.paloaltonetworks.com/?ts=markdown) Search All * [Tech Docs](https://docs.paloaltonetworks.com/search) Close search modal 1. [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) 2. [AI Security](https://www.paloaltonetworks.com/cyberpedia/ai-security?ts=markdown) 3. [Agentic AI Security](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security?ts=markdown) 4. [Agentic AI Governance](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance?ts=markdown) Table of contents * [Agentic AI Security: What It Is and How to Do It](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security?ts=markdown) * [The rise of agentic AI and its security implications](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security#the-rise-of-agentic-ai-and-its-security-implications?ts=markdown) * [Why does agentic AI introduce new security challenges?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security#why-does-agentic-ai-introduce-new-security-challenges?ts=markdown) * [How does agentic AI security work?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security#how-does-agentic-ai-security-work?ts=markdown) * [What are the top agentic AI security threats?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security#what-are-the-top-agentic-ai-security-threats?ts=markdown) * [How to secure agentic AI systems](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security#how-to-secure-agentic-ai-systems?ts=markdown) * [Agentic AI Security FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security#agentic-ai-security-faqs?ts=markdown) * [What Is the AI Agent Attack Surface?](https://www.paloaltonetworks.com/cyberpedia/ai-agent-attack-surface?ts=markdown) * [Why Do AI Agents Expand the Attack Surface?](https://www.paloaltonetworks.com/cyberpedia/ai-agent-attack-surface#why?ts=markdown) * [What Makes Up the AI Agent Attack Surface?](https://www.paloaltonetworks.com/cyberpedia/ai-agent-attack-surface#what?ts=markdown) * [AI Agent Attack Surface vs. LLM Application Attack Surface](https://www.paloaltonetworks.com/cyberpedia/ai-agent-attack-surface#vs?ts=markdown) * [Common Threats Across the AI Agent Attack Surface](https://www.paloaltonetworks.com/cyberpedia/ai-agent-attack-surface#common?ts=markdown) * [How Can Organizations Reduce the AI Agent Attack Surface?](https://www.paloaltonetworks.com/cyberpedia/ai-agent-attack-surface#surface?ts=markdown) * [Frequently Asked Questions](https://www.paloaltonetworks.com/cyberpedia/ai-agent-attack-surface#faqs?ts=markdown) * [Agentic AI Security Solutions: Top 7 Platforms Compared](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-security-solutions?ts=markdown) * [What Is Agentic AI Security and Why It Matters Now](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-security-solutions#/content/pan/en_US/cyberpedia/what-is-agentic-ai-security?ts=markdown) * [How Agentic AI Security Is Evolving in 2026](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-security-solutions#h4?ts=markdown) * [Top 7 Agentic AI Security Solutions for 2026](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-security-solutions#solutions?ts=markdown) * [Evaluating Agentic AI Security Companies: Key Criteria](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-security-solutions#evaluation?ts=markdown) * [Best Agentic AI Security Solutions and Tools FAQs](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-security-solutions#faqs?ts=markdown) * A Complete Guide to Agentic AI Governance * [Why is agentic AI governance so important today?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-van-dalen-anchor?ts=markdown) * [What are the main risks of AI agents?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#https://www.paloaltonetworks.com/cyberpedia/what-is-ai-bias?ts=markdown) * [Who is responsible when AI agents act autonomously?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#h5?ts=markdown) * [How to implement agentic AI governance](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-further-reading?ts=markdown) * [Where governance applies in the AI agent lifecycle](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#h5?ts=markdown) * [How standards and regulations influence agentic AI governance](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-arrow-list?ts=markdown) * [What Is Shadow AI? How It Happens and What to Do About It](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai?ts=markdown) * [What is the difference between shadow IT and shadow AI?](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#what-is-the-difference-between-shadow-it-and-shadow-ai?ts=markdown) * [How does shadow AI happen?](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#how-does-shadow-ai-happen?ts=markdown) * [What are some examples of shadow AI?](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#what-are-some-examples-of-shadow-ai?ts=markdown) * [What are the primary risks of shadow AI?](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#what-are-the-primary-risks-of-shadow-ai?ts=markdown) * [How to determine how and when employees are allowed to use GenAI apps](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#how-to-determine-how-and-when?ts=markdown) * [How to protect against shadow AI in 5 steps](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#how-to-protect-against-shadow-ai-in-5-steps?ts=markdown) * [Top 5 myths and misconceptions about shadow AI](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#top-5-myths-and-misconceptions-about-shadow-ai?ts=markdown) * [Shadow AI FAQs](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai#shadow-ai-faqs?ts=markdown) # A Complete Guide to Agentic AI Governance 6 min. read Table of contents * * [Why is agentic AI governance so important today?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-van-dalen-anchor?ts=markdown) * [What are the main risks of AI agents?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#https://www.paloaltonetworks.com/cyberpedia/what-is-ai-bias?ts=markdown) * [Who is responsible when AI agents act autonomously?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#h5?ts=markdown) * [How to implement agentic AI governance](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-further-reading?ts=markdown) * [Where governance applies in the AI agent lifecycle](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#h5?ts=markdown) * [How standards and regulations influence agentic AI governance](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-arrow-list?ts=markdown) 1. Why is agentic AI governance so important today? * * [Why is agentic AI governance so important today?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-van-dalen-anchor?ts=markdown) * [What are the main risks of AI agents?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#https://www.paloaltonetworks.com/cyberpedia/what-is-ai-bias?ts=markdown) * [Who is responsible when AI agents act autonomously?](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#h5?ts=markdown) * [How to implement agentic AI governance](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-further-reading?ts=markdown) * [Where governance applies in the AI agent lifecycle](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#h5?ts=markdown) * [How standards and regulations influence agentic AI governance](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance#cyberpedia-arrow-list?ts=markdown) Agentic AI governance is the structured management of delegated authority in autonomous AI systems that plan and execute actions on behalf of an organization. It sets clear boundaries on what agents can access and perform at runtime. Governance extends beyond model alignment, compliance, or monitoring by establishing explicit oversight and accountability for agent behavior. ## Why is agentic AI governance so important today? Agentic AI represents a structural shift in how organizations use [artificial intelligence](https://www.paloaltonetworks.com/cyberpedia/artificial-intelligence-ai). Earlier systems primarily generated insights. Human operators decided what to do next. Today, agents increasingly execute tasks directly within business workflows. Enterprise adoption reflects that shift. Agentic AI could unlock $2.6 trillion to $4.4 trillion annually across [generative AI](https://www.paloaltonetworks.com/cyberpedia/what-is-generative-ai) use cases, according to [McKinsey \& Company, Seizing the agentic AI advantage](https://www.mckinsey.com/capabilities/risk-and-resilience/our-insights/deploying-agentic-ai-with-safety-and-security-a-playbook-for-technology-leaders). Yet only 1 percent of organizations consider their AI adoption mature, as reported by [McKinsey \& Company, Superagency in the workplace: Empowering people to unlock AI's full potential](https://www.mckinsey.com/capabilities/tech-and-ai/our-insights/superagency-in-the-workplace-empowering-people-to-unlock-ais-full-potential-at-work). Experimentation is accelerating. Governance maturity is not. The difference is execution. Agents can plan, call tools, and act across systems with limited supervision. They introduce new operational authority. And early deployments have already surfaced risky agent behaviors in production environments. However, most [AI governance](https://www.paloaltonetworks.com/cyberpedia/ai-governance) programs were designed for model outputs, not autonomous actions. Oversight often stops at training validation or pilot controls. The implication is clear. As AI shifts from generating answers to initiating decisions, governance must evolve from policy alignment to sustained operational control. ![Icon of a report on a browser](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/icon-ai-governance-network-icon.svg) Quiz: How strong is your AI Security posture? Assess risks across your AI apps and agent-based systems, plus get solution recommendations. [Take quiz](https://www.paloaltonetworks.com/resources/infographics/interactive-quiz#intro) ## How does agentic AI governance differ from traditional AI governance? ![A side-by-side comparison chart titled 'Traditional AI governance vs. agentic AI governance' contrasts two distinct models. The left panel, labeled 'Traditional AI governance' with the question 'Is the answer correct, fair, compliant?', shows a linear flow from 'User' to 'Model' to 'Output' to 'Human decision' and lists focus areas like 'Training data quality' and 'Bias mitigation' above a red bar reading 'Primary risk: Output risk.' The right panel, labeled 'Agentic AI governance' with the question 'What can the system do, and who is accountable?', illustrates a complex flow involving 'User,' 'Agent,' 'Tool/API,' 'External systems,' and 'Action,' listing focus areas such as 'Authority boundaries' and 'Runtime constraints' above a red bar reading 'Expanded risk: Action risk.'](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/traditional-ai-governance-vs-agentic.png "A side-by-side comparison chart titled 'Traditional AI governance vs. agentic AI governance' contrasts two distinct models. The left panel, labeled 'Traditional AI governance' with the question 'Is the answer correct, fair, compliant?', shows a linear flow from 'User' to 'Model' to 'Output' to 'Human decision' and lists focus areas like 'Training data quality' and 'Bias mitigation' above a red bar reading 'Primary risk: Output risk.' The right panel, labeled 'Agentic AI governance' with the question 'What can the system do, and who is accountable?', illustrates a complex flow involving 'User,' 'Agent,' 'Tool/API,' 'External systems,' and 'Action,' listing focus areas such as 'Authority boundaries' and 'Runtime constraints' above a red bar reading 'Expanded risk: Action risk.'") Traditional AI governance focuses on models that produce outputs. Systems generate predictions, classifications, or text. Humans review the results and decide what action to take. Controls center on training data, [bias](https://www.paloaltonetworks.com/cyberpedia/what-is-ai-bias) mitigation, [explainability](https://www.paloaltonetworks.com/cyberpedia/explainable-ai), and post-output review. Agentic systems introduce a different operating model. Agents plan. They call tools. They execute multi-step workflows. They act within business processes rather than outside them. Decisions unfold over time instead of in a single response. That distinction matters. Traditional governance emphasizes output risk. The main concern is whether a response is accurate, fair, or compliant. Agentic governance must also address action risk. An agent may initiate a transaction, update a record, or interact with another system without waiting for human confirmation. Authority changes as well. Agents can inherit credentials. They can access APIs and internal services. They can collaborate with other agents in coordinated workflows. These capabilities expand the scope of impact beyond a single model output. Accountability becomes more complex. Responsibility may span model providers, platform operators, and deploying organizations. Which is why clear role definition becomes essential. In practice: Governance has to extend beyond model alignment into runtime action control. ## What are the main risks of AI agents? ![A chart titled 'Risks of AI agents' displays seven risk categories organized into two columns using orange square icons and text descriptions. The left column lists 'Loss of execution control' described as 'Actions extend beyond intended scope,' 'Unauthorized tool invocation' described as 'Agent accesses tools beyond approved pathways,' 'Privilege escalation' described as 'Inherited permissions exceed intended authority,' and 'Data misuse' described as 'Sensitive data moves outside defined context.' The right column lists 'Emergent multi-agent effects' described as 'Independent agents interact unpredictably,' 'Accountability diffusion' described as 'Responsibility becomes distributed or unclear,' and 'Drift over time' described as 'Behavior diverges as inputs and environments change.'](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/Risks-of-AI-agents.png "A chart titled 'Risks of AI agents' displays seven risk categories organized into two columns using orange square icons and text descriptions. The left column lists 'Loss of execution control' described as 'Actions extend beyond intended scope,' 'Unauthorized tool invocation' described as 'Agent accesses tools beyond approved pathways,' 'Privilege escalation' described as 'Inherited permissions exceed intended authority,' and 'Data misuse' described as 'Sensitive data moves outside defined context.' The right column lists 'Emergent multi-agent effects' described as 'Independent agents interact unpredictably,' 'Accountability diffusion' described as 'Responsibility becomes distributed or unclear,' and 'Drift over time' described as 'Behavior diverges as inputs and environments change.'") AI agents expand the scope of operational risk. They don't only generate outputs. They execute actions inside live systems. As authority increases, so does impact. However, not all risk looks the same. Some risks involve execution boundaries. Others involve identity, data, or coordination between agents. Governance requires understanding how these risk domains differ. Let's break them down. ### Loss of execution control Agentic systems can initiate actions without direct human approval. They may continue multi-step workflows once a goal is defined. If scope boundaries are unclear, execution can extend beyond intended limits. Control becomes harder to maintain when tasks chain together across systems. ### Unauthorized tool invocation Agents often integrate with APIs, databases, and enterprise services. Improper configuration can allow access to tools beyond their intended scope. Even well-designed workflows can create unintended pathways when agents dynamically select tools at runtime. Standardized protocols like [Model Context Protocol (MCP)](https://www.paloaltonetworks.in/cyberpedia/what-is-model-context-protocol-mcp) and Agent-to-Agent (A2A) communication expand tool connectivity but also introduce new vectors for context poisoning, credential leakage, and unauthorized function invocation if not governed at the protocol level. ### Privilege escalation Agents may inherit service credentials or operate under elevated permissions. Misconfigured identity controls can grant broader authority than required. In multi-agent environments, trust relationships can allow one agent's access to influence another's scope. ### Data misuse Agentic systems process and exchange data across workflows. [Sensitive information](https://www.paloaltonetworks.com/cyberpedia/sensitive-data) can move between systems without clear visibility. Data can also be repurposed outside its original context. Governance has to account for how data flows during execution, not just during training. ### Emergent multi-agent effects Inter-agent communication protocols can amplify this risk. A compromised agent may inject malicious context into shared memory or messages, causing downstream agents to execute unintended actions, a pattern known as cross-agent contamination. Small deviations can combine and produce broader operational consequences. System-level behavior may not always reflect the intent of any single agent. ### Accountability diffusion As mentioned earlier, responsibility often spans model providers, platform operators, and deploying organizations. When agents act autonomously, decision authority can distribute across components. Without clear ownership definitions, accountability can become unclear. ### Drift over time Agentic systems do not remain static. Inputs change. Tools evolve. Business processes shift. Over time, behavior can move away from its original design. What begins as controlled authority can gradually expand if not reviewed. | ***Further reading:** [Agentic AI Security: What It Is and How to Do It](https://www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-security)* ![Icon of a network](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/icon-assessment-ecosystem.svg) Free AI risk assessment Get a complimentary vulnerability assessment of your AI ecosystem. [Claim assessment](https://www.paloaltonetworks.com/network-security/cloud-and-ai-risk-assessment) ## Who is responsible when AI agents act autonomously? AI agents don't act independently of human authority. They act under delegated scope. Organizations define that scope. However: Delegation doesn't eliminate accountability. Autonomous execution can create distance between action and decision maker. An agent may initiate tasks without immediate human review. But that doesn't transfer responsibility to the system itself. ![A diagram titled 'Responsibility model in agentic AI systems' depicts a stepped progression of accountability starting with a 'Deploying organization' box on the left under 'Primary accountability' that lists responsibilities like 'Defines permissions' and 'Approves use cases.' Below this, 'Incident ownership' poses questions such as 'Who investigates?' and 'Who suspends execution?' while the next step up, 'Operational ownership,' lists 'Monitoring owner,' 'Approval owner,' and 'Intervention owner.' To the right, a section for 'Influencing roles' lists 'Model provider,' 'Platform operator,' and 'Integrator' as contributing roles. The top step connects to 'AI agent executes action' with the note 'Delegated authority in runtime' and features orange line icons representing gears and checks.](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/Responsibility-model-in-agentic-AI-systems.png "A diagram titled 'Responsibility model in agentic AI systems' depicts a stepped progression of accountability starting with a 'Deploying organization' box on the left under 'Primary accountability' that lists responsibilities like 'Defines permissions' and 'Approves use cases.' Below this, 'Incident ownership' poses questions such as 'Who investigates?' and 'Who suspends execution?' while the next step up, 'Operational ownership,' lists 'Monitoring owner,' 'Approval owner,' and 'Intervention owner.' To the right, a section for 'Influencing roles' lists 'Model provider,' 'Platform operator,' and 'Integrator' as contributing roles. The top step connects to 'AI agent executes action' with the note 'Delegated authority in runtime' and features orange line icons representing gears and checks.") Responsibility spans multiple roles: * Model providers shape system capability. * Platform operators define technical constraints. * Integrators configure workflows and tool connections. The deploying organization retains primary responsibility: * It defines permissions. * It approves use cases. * It determines how much authority the agent receives. Operational ownership has to be explicit, too. Governance should assign named individuals: * Someone who monitors behavior. * Someone who approves high-impact actions. * Someone who intervenes when outcomes deviate from intent. Incident ownership also needs to be defined before deployment: * Who investigates unexpected behavior? * Who can suspend execution? * Who reports material impact? Without clear answers, governance is incomplete. Essentially, autonomy changes how systems operate. It doesn't change who's responsible. | ***Further reading:** [What Is Responsible AI? Principles, Pitfalls, \& How-tos](https://www.paloaltonetworks.com/cyberpedia/what-is-responsible-ai)* ## How to implement agentic AI governance Governance becomes meaningful at implementation. Policies and principles only matter when they shape how an agent is built, deployed, and supervised in practice. That work follows a structured progression. It begins with defining authority and continues through runtime oversight and ongoing review. Here's how that structure takes shape. ![A vertical infographic titled 'How to implement agentic AI governance' lists eight numbered steps along a winding path. Step 1 is 'Define scope \& authority,' step 2 is 'Map identity \& access boundaries,' step 3 is 'Conduct pre-deployment impact assessment,' and step 4 is 'Establish runtime controls.' The path continues with step 5, 'Implement logging \& traceability,' step 6, 'Define human oversight thresholds,' step 7, 'Plan incident response \& shutdown,' and concludes with step 8, 'Establish ongoing evaluation \& drift monitoring.' Each step includes a brief description and a specific circular icon, such as a fingerprint for identity or a shield for impact assessment, while a caption at the bottom states, 'Governance is continuous across the agent lifecycle.'](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/How-to-implement-agentic-AI-governance.png) ### 1. Define the agent's scope and authority Governance begins with purpose. Every agent needs a clearly articulated objective and defined limits. That scope should describe what the agent can do and what remains outside its authority. It should also define which tools and data sources are in bounds and which are not. When authority is unclear at the start, controls become reactive later. ***Tip:*** *Document prohibited actions explicitly. Clear misuse boundaries reduce ambiguity and prevent silent scope expansion.* ### 2. Map identity and access boundaries Agents operate through system identities, not unlike human users. Those identities define what the agent can access and execute. Permissions should follow [least-privilege](https://www.paloaltonetworks.com/cyberpedia/what-is-the-principle-of-least-privilege) principles and reflect the agent's defined scope. Service credentials should grant only what is required for the task at hand. Any inheritance of authority should be intentional and periodically reviewed to prevent silent expansion. This extends to agent-to-agent trust. When agents communicate through standardized protocols, each agent's identity should be verified independently, and per-session authorization should prevent one agent's credentials from propagating to another. ### 3. Conduct a pre-deployment impact assessment Before activation, pause and evaluate impact. Consider how the agent's authority could affect financial, operational, legal, or reputational outcomes. Autonomy level matters. So does the scope of system access. The more independent the execution path, the more deliberate the review should be. A documented impact assessment strengthens governance and provides a clear record of how risk was evaluated before deployment. ***Tip:*** *Align review depth with autonomy level. Higher-impact agents warrant formal risk tiering and cross-functional signoff.* ### 4. Establish runtime controls Training-time alignment alone doesn't address execution risk. Agentic systems operate inside live environments where actions can affect real workflows. Runtime controls define what the agent can actually do once it's active. These controls limit tool invocation, validate tool inputs and outputs against policy, constrain execution paths, and trigger escalation when defined thresholds are reached. For agents using external tools through protocols like MCP, runtime governance should inspect both the tool definition and the data exchanged during each call. Guardrails need to function while the agent is operating. Not just during [development](https://www.paloaltonetworks.com/cyberpedia/ai-development-lifecycle) or testing. Further reading: [MCP Adoption Challenges for Enterprises](https://www.paloaltonetworks.com/cyberpedia/mcp-enterprise-adoption-challenges) ***Tip:*** *Keep guardrails separate from model logic. Enforcement controls should operate independently of the agent's reasoning layer.* ### 5. Implement logging and traceability Autonomous execution requires visibility into what the agent is doing. Actions should be logged. Inputs should be recorded. System interactions should remain traceable over time. That traceability supports audit, investigation, and ongoing improvement. Without it, accountability becomes difficult to demonstrate or enforce. Centralized logging is most effective when all AI interactions route through a common control plane. This provides a single audit trail with full attribution by user, team, agent, and model, rather than fragmented logs distributed across individual applications. ### 6. Define human oversight thresholds Not every action requires human approval. Some decisions can proceed autonomously within defined limits. Others carry higher impact and warrant direct review. Governance should clarify when human-in-the-loop approval applies and when human-on-the-loop monitoring is sufficient. Oversight roles should be assigned clearly so intervention is deliberate rather than reactive. The level of oversight should align with the authority granted to the agent. ### 7. Plan incident response and shutdown mechanisms Agents do not always behave as intended. Environments evolve. Dependencies change. Governance should clarify who has authority to suspend execution and under what circumstances. Clear fallback procedures should exist before activation, not after an issue emerges. Isolation and shutdown capabilities should be validated in advance so intervention is controlled and timely. ### 8. Establish ongoing evaluation and drift monitoring Governance doesn't end at deployment. Agents operate in changing environments. Data evolves. Workflows expand. Performance should be monitored against defined objectives over time. Risk should be reassessed as scope and context shift. Behavioral drift needs to be detected early so authority can be adjusted deliberately. Ongoing evaluation helps maintain alignment as systems mature. ***Tip:*** *Reassess permissions periodically. Drift often shows up in expanding authority, not just changing outputs.* In practice: Agentic AI governance brings together defined authority, disciplined identity controls, runtime safeguards, and sustained oversight. It reflects operational control in motion, not documentation stored on paper. ## Where governance applies in the AI agent lifecycle AI agents move through a defined lifecycle. Governance has to move with them. It doesn't begin at deployment and it doesn't end at runtime. The focus shifts as the system progresses from intent to execution to retirement. Governance appears at different points in that progression. Its form changes as the agent moves through each stage. ### Design Governance begins when the agent's purpose is defined. At this stage, teams determine what the agent is allowed to do and what remains out of scope. Risk tolerance, autonomy level, and system access are shaped here. The intensity of governance later in the lifecycle often reflects these early choices. Higher autonomy or broader access typically calls for stronger controls downstream. If authority boundaries are unclear at design, later controls tend to become reactive rather than preventative. ***Note:*** *Design decisions can implicitly fix risk posture long before formal controls are applied. If an agent is architected for high autonomy from the outset, later attempts to reduce authority may require structural redesign rather than simple configuration changes.* ### Development During development, governance becomes technical. Identity models are implemented. Access rules are encoded. Tool integrations are constrained. Architectural decisions influence whether enforcement is feasible at runtime. Governance at this stage focuses on building controllability into the system itself. ***Note:*** *Tool integrations often introduce indirect authority paths. Even if direct permissions are scoped correctly, composite workflows may create effective access beyond what was originally intended.* ### Pre-deployment testing Before activation, governance validates assumptions. Teams test escalation thresholds, permission boundaries, and execution paths. Impact assessment moves from theory to simulation. This stage confirms that authority limits behave as expected under realistic conditions. ### Deployment Deployment transitions governance from preparation to live operation. Defined permissions become active. Logging and monitoring responsibilities take effect. Oversight roles should be clearly assigned before the agent operates in production environments. ***Note:*** *Agents are uniquely sensitive to environmental variability. A governance framework validated in a controlled staging environment may behave differently once exposed to real production data, user behavior, and integration complexity, potentially triggering unintended execution paths.* ### Runtime Once operational, governance enforces discipline in real time. Execution controls restrict unintended tool usage. Intervention thresholds guide when humans must step in. Authority has to stay visible and reviewable while actions unfold across systems. ### Continuous monitoring Over time, systems evolve. Data inputs change. Workflows expand. Governance reassesses risk as context shifts. Drift detection and periodic review help prevent gradual expansion of authority beyond original intent. Continuous monitoring should also extend to the agent's supply chain. New tool integrations, updated model versions, and changes to orchestration logic can shift an agent's effective capabilities without altering its explicit permissions. ***Note:*** *Drift may arise from operational context changes rather than model updates. New integrations, user behaviors, or policy changes can shift risk exposure even if the underlying model remains unchanged.* ### Decommissioning Retirement is part of governance. Access credentials must be revoked. Tool integrations must be disabled. Historical records must be preserved for audit and review. Authority should end as intentionally as it began. The takeaway: Agentic AI governance is continuous. It adapts as the agent moves from design through decommissioning. Control is not a phase. It's a lifecycle commitment. ## Example: Governing an enterprise AI agent in practice ![A timeline diagram titled 'Traditional AI governance vs. agentic AI governance' displays a wavy line connecting seven circular icons representing lifecycle stages ranging from a clipboard to a grid of squares. Top labels identify phases as 'Design,' 'Pre-deployment testing,' 'Runtime,' and 'Decommissioning,' with sub-descriptions like 'Define scope \& authority' and 'Enforce execution boundaries.' Bottom labels identify phases including 'Development,' 'Deployment,' and 'Continuous monitoring,' with descriptions such as 'Embed identity \& access controls' and 'Detect drift \& reassess risk.' Below the timeline, a green line connects specific governance steps labeled 'Authority definition,' 'Control architecture,' 'Risk validation,' 'Oversight activation,' 'Execution monitoring,' 'Drift reassessment,' and 'Authority closure.' A large green button at the bottom reads 'Continuous governance discipline.'](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/Agentic-AI-governance-across-the-lifecycle.png "A timeline diagram titled 'Traditional AI governance vs. agentic AI governance' displays a wavy line connecting seven circular icons representing lifecycle stages ranging from a clipboard to a grid of squares. Top labels identify phases as 'Design,' 'Pre-deployment testing,' 'Runtime,' and 'Decommissioning,' with sub-descriptions like 'Define scope & authority' and 'Enforce execution boundaries.' Bottom labels identify phases including 'Development,' 'Deployment,' and 'Continuous monitoring,' with descriptions such as 'Embed identity & access controls' and 'Detect drift & reassess risk.' Below the timeline, a green line connects specific governance steps labeled 'Authority definition,' 'Control architecture,' 'Risk validation,' 'Oversight activation,' 'Execution monitoring,' 'Drift reassessment,' and 'Authority closure.' A large green button at the bottom reads 'Continuous governance discipline.'") Governance becomes clearer when applied to a real system. Consider how it appears in a common enterprise use case: * **Imagine an organization deploying an AI procurement agent inside its ERP system.** The goal is simple. The agent reviews routine purchase requests and creates purchase orders for approved vendors within predefined budget limits. * **The authority is delegated.** A human owner defines what the agent may approve and what requires escalation. The agent can't change budget rules. It can't add new vendors. It operates only within its assigned scope. * **That scope is enforced through identity controls.** The agent uses a service identity with limited permissions. It can access procurement records. It can create purchase orders. It can't modify financial controls or override approval hierarchies. * **Every action is logged.** Each tool call and data access event is recorded. If a purchase order is created, the transaction is traceable to the agent's identity and timestamp. * **Human checkpoints remain in place.** Transactions above a defined threshold pause for managerial review. Anomalies trigger escalation rather than automatic execution. * **Governance also continues over time.** Spending patterns are monitored. Vendor selections are reviewed. If behavior begins to diverge from expected norms, permissions can be adjusted or execution suspended. In short: The agent executes tasks. Humans define the limits. Governance ensures authority remains bounded at every step. ## How standards and regulations influence agentic AI governance Agentic AI governance doesn't emerge from scratch. It aligns with existing risk and management frameworks that already shape how organizations govern complex systems. Autonomous agents increase the urgency of applying those structures consistently. Several established standards and regulations are especially relevant: | Comparison of AI governance frameworks relevant to agentic systems | |--------------------------------------------------------------------| | Framework / Regulation | Primary focus | Relevance to agentic AI governance | |-----------------------------------------------------------------------------------------------------------------|----------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------| | [NIST AI Risk Management Framework (AI RMF)](https://www.nist.gov/itl/ai-risk-management-framework) | Risk identification and lifecycle management | Supports structured evaluation of autonomy, runtime risk, and continuous monitoring across Govern, Map, Measure, and Manage functions. | | [ISO/IEC 42001:2023](https://www.iso.org/standard/42001) | AI management systems | Formalizes governance roles, documentation requirements, and oversight mechanisms within organizational structures. | | [ISO/IEC 42005](https://www.iso.org/standard/42005) | AI system impact assessment | Guides structured pre-deployment evaluation of potential harms and operational impacts for specific AI use cases. | | [ISO/IEC 23894](https://www.iso.org/standard/77304.html) | AI risk management alignment | Integrates AI risk into broader enterprise risk management practices and control models. | | [EU AI Act](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng) | Binding legal obligations for AI systems | Establishes requirements for risk classification, human oversight, documentation, and accountability for high-risk deployments. | | [OWASP Top 10 for LLM Applications](https://owasp.org/www-project-top-10-for-large-language-model-applications) | AI-specific application security risks | Identifies threats like prompt injection, excessive agency, and insecure plugin design that directly affect agentic system governance. | | ***Further reading:*** * [*AI Risk Management Frameworks: Everything You Need to Know*](https://www.paloaltonetworks.com/cyberpedia/ai-risk-management-framework) * [*NIST AI Risk Management Framework (AI RMF)*](https://www.paloaltonetworks.com/cyberpedia/nist-ai-risk-management-framework) * [*A Guide to AI TRiSM: Trust, Risk, and Security Management*](https://www.paloaltonetworks.com/cyberpedia/ai-trism) ![Icon of a browser with the prisma airs logo on it](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cyberpedia/what-is-agentic-ai-governance/icon-governance-prisma-airs.svg) Personalized demo: Prisma Airs Schedule a personalized demo with a specialist to see how Prisma AIRS keeps AI agents safe from manipulation and unsafe actions. [Book demo](https://start.paloaltonetworks.com/prisma-airs-demo.html) ## Agentic AI governance FAQs ### Is agentic AI governance required by law? Agentic AI governance is not universally mandated. However, risk-based regulations increasingly impose obligations on systems that affect rights, safety, or financial outcomes. High-risk deployments may require impact assessments, documentation, human oversight, and traceability. Governance maturity supports compliance as regulatory expectations evolve. ### Who is liable if an AI agent causes harm? Liability generally rests with the organization that deploys and authorizes the agent. Model providers and platform operators may influence behavior, but the deploying entity defines scope, access, and oversight. Autonomous execution doesn't remove organizational accountability for operational impact. ### How do you monitor an AI agent in production? Monitoring includes real-time logging of actions, tool calls, data access, and execution paths. Defined escalation thresholds trigger human review for high-impact activity. Performance metrics, anomaly detection, and drift analysis help ensure the agent remains aligned with its intended purpose. ### What documentation should exist for an AI agent? Documentation should define purpose, authority scope, access permissions, risk assessment findings, oversight assignments, and escalation procedures. Logs and change records should be retained for auditability. Clear documentation supports traceability, accountability, and regulatory alignment across the lifecycle. ### How often should AI agents be reviewed for drift? Review frequency depends on risk level and system impact. Higher-autonomy or high-impact agents require more frequent evaluation. Monitoring should be continuous, with periodic formal reassessment to detect behavioral drift, data changes, or scope expansion beyond original intent. ### How does identity and access management apply to AI agents? AI agents operate through service identities. Permissions should follow least-privilege principles and align with defined scope. Access to APIs, databases, and internal systems must be intentionally configured and regularly reviewed to prevent unauthorized expansion of authority. ### What makes an AI system "agentic" from a governance perspective? An AI system becomes agentic when it initiates actions, calls tools, or executes multi-step workflows with delegated authority. Governance concerns increase when the system operates at runtime within live environments rather than only generating outputs for human review. Related content [Blog: Agentic Browsers - The New Frontier in Web Security Risks Read about how AI is changing the browser itself.](https://www.paloaltonetworks.com/blog/sase/agentic-browsers-the-new-frontier-in-web-security-risks/) [eBook: Is Your AI Ecosystem Secure? Discover the blueprint for protecting all your AI investments.](https://www.paloaltonetworks.com/resources/ebooks/is-your-ai-ecosystem-secure) [Threat research: When AI Remembers Too Much -- Persistent Behaviors in Agents' Memory See how adversaries can use indirect prompt injection to poison an AI Agent.](https://unit42.paloaltonetworks.com/indirect-prompt-injection-poisons-ai-longterm-memory/) [Threat research: AI Agents Are Here. So Are the Threats. Learn how attackers can target agentic applications.](https://unit42.paloaltonetworks.com/agentic-ai-threats/) ![Share page on facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/facebook-circular-icon.svg) ![Share page on linkedin](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/linkedin-circular-icon.svg) [![Share page by an email](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/resources/email-circular-icon.svg)](mailto:?subject=A%20Complete%20Guide%20to%20Agentic%20AI%20Governance&body=Agentic%20AI%20governance%20is%20the%20structured%20management%20of%20delegated%20authority%20in%20autonomous%20AI%20systems%20that%20execute%20actions%20for%20an%20organization.%20at%20https%3A//www.paloaltonetworks.com/cyberpedia/what-is-agentic-ai-governance) Back to Top [Previous](https://www.paloaltonetworks.com/cyberpedia/agentic-ai-security-solutions?ts=markdown) Agentic AI Security Solutions: Top 7 Platforms Compared [Next](https://www.paloaltonetworks.com/cyberpedia/what-is-shadow-ai?ts=markdown) What Is Shadow AI? How It Happens and What to Do About It {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/ai-security/prisma-airs?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/ot-security-solution?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/unit42/respond/managed-detection-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * Observability * [Cortex XCOR](https://www.paloaltonetworks.com/cortex/xcor?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Prepare for Emerging Risks](https://www.paloaltonetworks.com/unit42/prepare-for-emerging-risks/continuous-frontier-ai-defense?ts=markdown) * [Strengthen Your Defenses](https://www.paloaltonetworks.com/unit42/strengthen-your-defenses?ts=markdown) * [Build Your Security Strategy](https://www.paloaltonetworks.com/unit42/build-your-security-strategy?ts=markdown) * [Understand the Adversary](https://www.paloaltonetworks.com/unit42/threat-intelligence?ts=markdown) * [Respond to a Cyber Attack](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center-subscribe.html) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/certifications?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![Palo Alto Networks Logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language