Zero Networks, a Zero Trust security solutions provider, announced a new capability at Black Hat USA 2026. This new capability applies the Open Worldwide Application Security Project’s (OWASP) principle of Least Agency to help organizations safely deploy AI agents.
Reducing the impact of compromised AI agents
The Least Agency Enforcement capability uses identity-based microsegmentation, policy automation, and just-in-time (JIT) multi-factor authentication (MFA) for privileged access, ensuring that AI agents communicate only with explicitly authorized systems, access approved resources, and require human approval before performing sensitive administrative actions.
How the new capability benefits organizations
Zero Networks enforces Least Agency across cloud, on-premises, Kubernetes, IoT/OT, and hybrid environments.
This capability enables organizations to:
- Limit AI agents’ access to only the systems and services required for their assigned tasks.
- Prevent lateral movement between applications, infrastructure, and administrative systems.
- Require JIT MFA before AI agents access privileged ports or sensitive infrastructure.
- Automatically generate and enforce least-privilege communication policies without manual rule creation.
- Contain compromised, manipulated, or over-permissioned AI agents before they can impact critical business systems.
Limiting AI agents’ access to prevent security breaches
“Least privilege works because it is simple: give people access to what they need, nothing more. We’re doing the same thing for AI agents, except now it must be automatic, because nobody has time to babysit a thousand agents by hand,” said Benny Lakunishok, CEO and co-founder of Zero Networks.
“If an agent gets fooled or misused, it should hit a wall almost immediately, not wander around the network looking for something valuable. That’s the bet we’re making: less freedom for the agent now, which beats explaining a breach later.”
Securing agentic AI deployments has become the focus for many MSPs, IT teams, and security vendors. As organizations seek added productivity through non-human identities, attack surfaces and the potential for significant risk continue to rise.
Building on Zero Networks’ existing AI platform
The new capability builds on Zero Networks’ AI Security platform, including AI Agent Control, AI Segmentation, AI SaaS Control, and protection for enterprise large language model (LLM) deployments.
Earlier this year, Zero Networks introduced Kubernetes Access Matrix to help teams reduce risk. Read more about this new capability, which gives DevOps teams instant visibility into Kubernetes connectivity.