AppViewX Adds Shadow AI Visibility and a Runtime Kill Switch to Agent Identity Security

New York, New York, October 6th, 2026, CyberNewswire

Purpose-built for AI agents, new capabilities uncover shadow AI, stop rogue enterprise agents at runtime, and issue quantum-resilient agent identities 

AppViewX, the leading identity security company built for the AI-powered and post-quantum enterprise, today expanded capabilities for Agent Identity Security, a solution enabling enterprises to discover every agent, whether sanctioned or shadow; govern their posture and maintain audit-ready activity logs; and monitor and control in real time every action that the agent performs.

AppViewX now also issues quantum-resilient agent identities, so trust in every agent holds as the cryptography infrastructure layer of the enterprise evolves.  

The sprawl of AI agents is creating a new identity challenge for CISOs. Each agent brings models, credentials, privileges, skills, and connections to enterprise systems that must be secured, and agents can be created and act autonomously or on behalf of humans at a pace traditional access controls were never built to handle.

The credentials and cryptography that establish trust in those identities must also remain secure as enterprises prepare for a post-quantum world. 

AppViewX approaches agent security as an identity and access problem, but one that requires a new paradigm.

Rather than simply retrofitting traditional human identity architectures, Agent Identity Security is purpose-built at the identity layer.

It offers the industry’s most comprehensive discovery, governance, and runtime security capabilities for coding agents, enterprise productivity agents, endpoint agents, SaaS agents, and custom-built agents.  

“Governance becomes much harder to introduce after agents and their access have already spread,” said Venkat Chivukula, Vice President, Enterprise Applications and AI at ZoomInfo.

“As agents connect to more systems and take more actions, organizations need a way to understand and control their combined access. Agent Identity Security is helping us bring together broader lifecycle governance, privileged access control, and runtime detection so we can establish those guardrails early and maintain control as AI adoption scales.” 

The latest Agent Identity Security capabilities help enterprises: 

• Discover every agent, including Shadow AI, with an expanded AI Bill of Materials: AppViewX discovers sanctioned and unsanctioned agents across the enterprise, with new capabilities to discover browser-based and short-lived, script-based shadow agents. The AI Bill of Materials (AIBOM), which gives security teams a centralized view of every agent’s models, MCP tools, credentials, and identities, now extends to the skills agents can access, so that teams can assess what these skills enable and flag unsafe capabilities. Unlike alternative solutions that rely on a single detection method, AppViewX combines its own new lightweight endpoint Guardian Agent with API integrations across EDR, SaaS, and cloud platforms, giving security teams confidence that no shadow agent goes undetected. 
• Govern every MCP server, including shadow servers, with a new MCP Gateway: AppViewX discovers sanctioned and shadow MCP servers and continuously assesses their risk and posture. Just-in-time access eliminates standing privileges, granting agents access to MCP servers and tools only when and for as long as needed, based on identity and agent context. Sensitive data is redacted using built-in controls or by integrating with existing data security tools such as Microsoft Purview. 
• Stop any agent at runtime with the new Agent Kill Switch: AppViewX offers the industry’s most comprehensive approach to terminating an agent and its active sessions, whether automatically when triggered by events, through runtime policies, or on demand. Security teams can easily build event-driven workflows that terminate an agent based on changes AppViewX detects, such as configuration changes. Through integration with the Shared Signals Framework (SSF), workflows can also act on signals from third-party security tools. Agents can also be stopped leveraging runtime policies based on resource type, the agent itself, and its intent, or on demand from the console. Unlike alternative approaches, the Agent Kill Switch covers both sanctioned and shadow agents and does not depend on an MCP gateway.  
• Govern AI programs with expanded cost and compliance controls: AppViewX now shows AI token usage, trends, and costs, and lets enterprises set threshold policies to prevent runaway spending. To help enterprises keep pace with emerging AI regulations, AppViewX now enables organizations to assess and demonstrate alignment of their agent deployments against the OWASP Top 10 for Agentic Applications and Agentic Skills, MITRE ATLAS, GDPR, HIPAA, ISO 27001/42001, and NIST SP 800-53 Rev. 5, alongside NIST AI RMF, the EU AI Act, SOC 2, and SEC Cyber Disclosure. 

“We need to scale AI, and we need to scale fast, but that requires solving the foundational governance and risk questions at the same time,” said Sadeq Zabihi, Senior Director of Platform and Services at Docusign.

“AppViewX’s Agent Identity Security brings discovery, governance, security, detection and response together so my team can see where agents are operating, apply the right policies, and detect when their behavior creates risk.” 

This release of Agent Identity Security is the latest proof point of AppViewX’s broader vision for securing identity, credentials, and cryptography together, for agents and machines. 

As enterprises deploy AI agents, each one becomes a unique identity class that needs credentials to reach APIs, tools, and other agents, often at a scale and speed traditional processes can’t manage.

OAuth governs what an agent may do on a user’s behalf, but the agent must still prove who it is, and static identities are easy to leak and hard to manage at agent scale. 

AppViewX has extended its core PKI (Public Key Infrastructure) and CLM (Certificate Lifecycle Management) platform capabilities to issue and cryptographically verifiable quantum-resilient agent identities, which adds an additional trust layer when authenticating via an Enterprise IdP.

Since these identities chain to the customer’s AppViewX-managed PKI, security teams get one trusted root, a clear tamper-evident audit trail, and a single place to build quantum-resilient agent identities. 

Organizations can talk to an AppViewX expert about Agent Identity Security or learn more at appviewx.com/products/ai-agent-identity-security-software. 

About AppViewX   

AppViewX is the leading machine and agent identity security company built for the AI and quantum enterprise, bringing together discovery, automation, control, and intelligence.

The AVX Platform helps enterprises reduce risk by providing complete visibility and governance over every machine and AI agent identity, automating their lifecycle, controlling their access, and ensuring compliance at the speed business demands.  

Trusted by global enterprises across financial services, healthcare, and technology, AppViewX is recognized as a leader in the IDC MarketScape for Certificate Lifecycle Management and KuppingerCole’s Non-Human Identity Management Leadership Compass.

For more information, users can visit appviewx.com.  

AppViewX Media

media@appviewx.com