RCP Channel Briefing

Blog archive

Netwrix Extends Identity Security Monitoring to AI Agents in Microsoft Entra ID

Netwrix has updated two identity security products to give organizations greater visibility into AI agents operating as identities within Microsoft Entra ID. The updates are centred across Netwrix PingCastle and Netwrix Threat Manager, which extend identity security deeper into Microsoft cloud.

Netwrix Threat Manager 3.3 can now inventory AI agent identities and show the access they hold. The capability extends monitoring already available for service accounts, including risk insights, abnormal behavior detection, attack context and adds new threat detection for Azure Files, protecting file shares against ransomware. Agent-specific threat detection is planned for a later release.

Netwrix PingCastle 4.0, meanwhile, expands its Entra ID assessment capabilities to 102 risk checks. That gives security teams a common approach for evaluating identity risks across both on-premises Active Directory and Microsoft's cloud identity platform. Threat Manager also adds Azure Files monitoring for ransomware, abnormal activity and potentially dangerous changes such as enabling open access.

The release addresses an emerging identity-management problem as enterprises deploy autonomous agents with access to applications and data. Netwrix's own research found only 19 percent of surveyed organizations fully govern non-human identities such as service accounts and AI agents. The new capabilities complement Microsoft's native tooling with independent assessment and visibility across the Microsoft identity plane.

For enterprise security teams, discovering those identities is a prerequisite for applying conventional identity governance practices. As agents receive permissions to perform business tasks, organizations increasingly need inventories, ownership records, access reviews and behavioral monitoring comparable to controls already applied to human and service identities. Netwrix PingCastle 4.0 and Netwrix Threat Manager 3.3 are available now.

The "RCP Channel Briefing" blog is researched, fact-checked, edited and updated by the editors of RCPmag.com, with writing assistance from AI. To submit your channel company's press release for consideration, contact Ammaarah Mohamed.

Posted by Redmond Channel Partner magazine staff on August 18, 2026


Featured