Rubrik (NYSE: RBRK) announced Rubrik Agent Identity at the Black Hat Conference, a new product designed to monitor and control AI agents' access and permissions within enterprise environments.

The product is delivered as an expansion of the company's existing Rubrik Agent Cloud platform and introduces just-in-time permissions issued per tool call, replacing static credentials that Rubrik says were not designed for autonomous systems. The solution integrates with Okta and Microsoft Entra ID, extending existing enterprise identity structures to AI agents without requiring new directories.

Rubrik Agent Identity operates across four pillars within the Agent Cloud platform: Agent Observability, which monitors agents and model context protocol (MCP) servers at runtime; Agent Identity, which controls access per tool call; Agent Runtime Security, which enforces policies and detects errors in real time; and Agent Rewind, which reverses unwanted agent actions.

Every MCP tool call must pass three checkpoints before execution: behavioral analysis, access policy enforcement, and identity verification. Unauthorized actions are blocked before execution.

"Agent Identity lets enterprises decide who can do what with agents and enforces it at each tool call, at the moment of action, with scoped, short-lived access," said Dev Rishi, General Manager of AI at Rubrik.

According to data from Rubrik Zero Labs, 86% of global IT and security leaders expect AI agents to outpace their organization's security guardrails within the next year, while only 23% report full visibility into agents operating in their environments. The same data indicates 88% of leaders are concerned about meeting recovery time objectives as agentic threats scale.