Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Aaron Beardslee, Security Researcher, Securonix Threat Labs As many of you have heard, OpenAI was running a cyber-capability evaluation against advanced models, including GPT-5.6 Sol and a more capable pre-release model with reduced cyber refusals. The environment was meant to be constrained and the model still brute forced through it.

Governing AI agents at enterprise scale requires a fundamental change in how security, risk, and compliance teams think about AI oversight. The generative AI era focused governance on output quality: what the model says, what it produces, and whether the content meets policy standards. ‍ The agentic era demands governance of action and delegated authority: what the AI is allowed to do, what systems it can touch, and how its decisions trace back to human accountability.

AI agent sprawl is the uncontrolled proliferation of AI agents, autonomous assistants, and LLM-powered tools across an organization without centralized tracking or governance. It mirrors historical IT challenges like SaaS sprawl and shadow IT, and it emerges when decentralized business units build or deploy agents independently, without coordinated oversight from security, IT, or risk teams. ‍ The difference is that these agents are active software actors.

Effective cyber risk quantification means moving past subjective heatmaps and translating technical vulnerabilities into dollar-denominated loss exposure and probability distributions that the CFO, board, and cyber insurance underwriter can act on. It is the discipline that turns cyber from a technical cost center into a strategic risk portfolio managed alongside every other category of enterprise exposure.

Enterprise security teams sit on enormous volumes of operational data. Vulnerability scanners produce thousands of findings weekly. Endpoint agents generate millions of events daily. SIEM platforms ingest logs from every system in the environment. Threat intelligence feeds fire off indicators by the hour. All of this data is useful for operational security work.

Vendor assurance efforts are increasing, but risk leaders don’t trust the results of that effort. In KPMG’s Global Third-Party Risk Management (TPRM) Survey, only 15% of risk leaders said they have high confidence in the data that underpins their TPRM program. Only 17% rate their data quality as excellent. Security teams are running more assessments and sending more questionnaires than ever, but fewer than one in five leaders trust what any of that produces.

AI is quickly becoming one of the most useful tools available to security researchers. Its ability to analyze enormous volumes of data, identify vulnerabilities, reconstruct attacks, connect seemingly unrelated signals, and help defenders respond faster than humans could alone is incredibly beneficial.

The Remediation Agent and Malicious Code Defense are the first two pieces of Evo Agentic AppSec: security that not only surfaces risk, but resolves it and prevents the next ones. This morning, we announced the broadest expansion of the Snyk AI Security Platform to date: discover, remediate, validate, and prevent. A loop with a missing segment is not a loop; it is a gap that an autonomous attacker will occupy. Evo Continuous Offensive Security closes validation and shipped today.

When we started thinking about how to surface AI model risk inside Evo, the obvious answer was to borrow from how we score everything else: find the issue, assign a severity, surface it. Done. The core of the new approach is a real risk score, built the way security teams already reason about risk: Likelihood × Impact. Likelihood comes from Attack Success Rate (ASR), the share of real adversarial attacks that succeed against a model. Impact is how much damage the attacker's goal does when it lands.

When we first introduced Agent Risk Manager, the response was clear: many security teams are actively looking for a way to secure the AI agents already running in their environment and how they can confidently adopt AI across their organization. AI agents now operate inside organizations with real access to email, files and business systems, often with little visibility for the teams responsible for securing them. That’s exactly the problem Agent Risk Manager was built to solve.