\n\t\t\t

\n\t\t\t\t

\n\t\t\t\t\t\n\t\t\t\t\t\tUPDATED 08:00 EDT / SEPTEMBER 10 2026\t\t\t\t\t\n\t\t\t\t

\n\t\t\t

\n\n\t\t\t

\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t $\"\"$ \t\t\t\t\t\t\t\t\t\t\t\t\t\t\tSECURITY\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\n\t\t\t

\n\t\t\t\t

JumpCloud extends Agentic IAM with new controls for autonomous AI agents

\n\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t

\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tby\t\t\t\t\t\t\t\tDuncan Riley\n\t\t\t\t\t\t\t

\n\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t

\n\t\t\t

\n\n\t\t\t

\n\t\t\t\t

Identity and access management company JumpCloud Inc. today extended its Agentic IAM service to give information technology teams direct control over the autonomous artificial intelligence agents running inside their organizations.

Agents now sit in the same directory as employees and their laptops. Every agent is tied to a named human owner, and an unowned agent will not run at all. JumpCloud tracks each one from creation through to retirement.

Four capabilities make up the release. Every agent registered with JumpCloud gets a unique identity, which lets an administrator audit what it did or cut off its access without locking out the employee who deployed it. The platform will also hunt for Model Context Protocol servers set up outside official channels and route them through the JumpCloud AI Gateway.

Device trust and access policies that already govern sanctioned software now extend to AI tools. A privileged access management server built on the protocol rounds out the set. JumpCloud said that one will ship before the end of the fourth quarter. It’s meant to retire the shared application programming interface keys agents currently pass around.

Privileged access rules now apply to agents directly. Each grant expires with the task it was issued for. Nothing broader gets handed out in the meantime. That, JumpCloud said, is what lets companies point AI at legacy systems without rebuilding them.

Only 21% of organizations have put governance controls around nonhuman identities. That is the lowest score of 10 recommended AI security practices in JumpCloud’s quarterly survey of IT leaders, published in July. Nonhuman identities outnumber people at 83% of the organizations surveyed.

Joel Rennich, JumpCloud’s senior vice president of product management, said AI agents are “changing how identity management works.” The tools move fast, he said, and the information technology department has to know which agents exist, who owns them and what they can touch.

Agents do not simply reach into systems, according to Rahul Kamdar, senior vice president of product at JumpCloud. They “act inside them.” That, Kamdar said, makes identity the control plane for AI security.

Agentic IAM launched in April. JumpCloud launched a version on Google Cloud in June, expanding an existing partnership with the cloud provider. JumpCloud shipped its first AI features in January, shadow AI detection among them.

JumpCloud is based in Louisville, Colo. Investors have put $408 million into the business across 10 rounds. Sapphire Ventures led the most recent, a $159 million Series F, five years ago this month. The valuation then was $2.56 billion.

Image: JumpCloud

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network

Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/

About SiliconANGLE Media

SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.

\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

\n \n \n

Your identity infrastructure wasn’t built for AI agents. It was designed for people: employees who go through onboarding, get assigned a managed device, and carry documented permissions through a formal directory.

\n\n\n\n

That works for your human workforce. Agents bypass the whole process.

\n\n\n\n

AI agents don’t go through onboarding. No one assigns them a badge or configures a managed device for their first day. They arrive, start working, connect to enterprise systems, and accumulate access. They run at machine speed, around the clock, on whatever systems they can reach. And in many organizations, they operate entirely outside of the governance framework that covers the rest of the workforce.

\n\n\n\n

The old methods won’t work for AI agents. They need a new approach: an entire lifecycle focused on discovering them, registering them, managing them, and governing them.

\n\n\n\n

This video shows how JumpCloud approaches that challenge. Give it a watch, and then keep reading to dig deeper. Because governing agents isn’t about simply adopting a new product or a policy. It requires a rethink of how you classify identities.

\n\n\n\n \n\n\n\n

The AI Governance Gap Is Already Here

\n\n\n\n

More than six in 10 organizations have AI agents running in production workflows right now, according to our latest IT Trends Report. At the same time, 75% of IT leaders say AI is advancing faster than their organization’s ability to manage the risks it creates.

\n\n\n\n

The data gets even more stark when you look at how AI usage is expanding.

\n\n\n\n

Non-human identities (NHIs) now outnumber human users in 83% of organizations. But only 21% have adopted governance controls for them.

\n\n\n\n

This combination of broad deployment and thin governance is the reality for most IT teams today.

\n\n\n\n

The organizations that are closest to closing the gap share one characteristic. They’ve stopped treating agents like tools and started treating them like identities.

\n\n\n\n

Agents Are an Identity Class, Not a Tool Category

\n\n\n\n

When a human employee joins the company, they get a formal identity: a record that establishes who they are and what they can access. That record is the foundation for every security control that follows.

\n\n\n\n

AI agents need that same foundation. They don’t come with one.

\n\n\n\n

The most common instinct is to treat agents like software. As something to be inventoried, monitored, and controlled through existing security tooling.

\n\n\n\n

But agents don’t behave like applications. They act, decide, connect to systems, and accumulate permissions the way human users do. But on a faster, grander scale.

\n\n\n\n

Agents are high-velocity, context-dependent, and capable of acting continuously without human initiation. They can be compromised, manipulated, or abandoned and left running with full permissions after a project ends.

\n\n\n\n

These zombie agents are an operational liability. And the result of treating AI agents as tools.

\n\n\n\n

Governing agents requires asking the same foundational questions you ask about any identity. Who is this? What can it access? Who’s accountable? And when should its permissions change?

\n\n\n\n

That reframe is the bedrock of Agentic IAM. Here’s how it works.

\n\n\n\n

The Agentic IAM Lifecycle. Four Stages, One Foundation.

\n\n\n\n

JumpCloud Agentic IAM manages AI agents across their full operational lifecycle from the moment they’re added to your environment to the moment they’re deprovisioned.

\n\n\n\n

You need this end-to-end visibility and oversight if you plan to get real value from the AI agents your team’s already using, without sacrificing your security standards.

\n\n\n\n

The four stages of Agentic IAM are what make AI acceleration possible. This is the foundation that separates your team’s AI efforts from everyone else’s.

\n\n\n\n

Discover

\n\n\n\n

You can’t govern what you can’t see. Discovery means building an authoritative inventory of every agent in your environment, the systems they touch, and the workflows they influence.

\n\n\n\n

Our latest research found that 38% of IT leaders cite a lack of centralized visibility as one of the top barriers to expanding AI agent use. This means more than a third of organizations are still at the discovery starting line.

\n\n\n\n

Register

\n\n\n\n

Once an agent is visible, it needs a formal identity. Registration means setting up each agent in your identity infrastructure with a defined purpose, a mapped scope of access, and a human owner who’s accountable for what it does.

\n\n\n\n

This is how you create the accountability chain that agents are missing by default. An agent without a registered identity is an agent you can’t understand. Discovery without registration is a list of names with no ability to act behind it.

\n\n\n\n

Manage

\n\n\n\n

Managing an agent means controlling where it works and what data it can reach, with access scoped to exactly what the task requires and nothing more. It also means verifying the environment the agent is operating in. An agent with legitimate credentials running on a compromised or unmanaged device is still a security risk.

\n\n\n\n

This is where JumpCloud’s connection between identities and devices makes a difference. Make sure agents can only access sensitive resources from systems that meet your security requirements.

\n\n\n\n

Govern

\n\n\n\n

Governance is what keeps everything current as your environment changes. It means continuous monitoring, centralized logging of every agent action tied to its identity and device context, and regular access reviews to make sure entitlements haven’t drifted from what they should be.

\n\n\n\n

It also means knowing when to require a human to make the call.

\n\n\n\n

Full autonomy without human review more than doubled over the past six months, rising from 11% to 26%. The ability to enforce human validation checkpoints before an agent takes a high-impact action is what keeps expanding autonomy from becoming unmanaged risk.

\n\n\n\n

Secure Every Identity. Human or Not.

\n\n\n\n

The agentic era doesn’t call for a completely new security philosophy. It calls for applying the identity discipline your team’s already built to a new class of worker.

\n\n\n\n

Agents are part of the workforce now. They need the same visibility, accountability, and control that every other identity in your environment gets. And more.

\n\n\n\n

JumpCloud Agentic IAM is built for the task. It discovers agents across devices, browsers, and on-prem environments. It registers and governs them alongside your human employees. It secures the full lifecycle from a single control plane. No separate tools. No gaps between identity, device, and agent management.

\n\n\n\n

That’s Intelligent, Secure IT for the agentic era.

\n\n\n\n

Download the full IT Trends Report to see exactly how 800 IT leaders across the U.S. and U.K. are navigating agentic AI across their environments. Find out where the governance gaps are deepest, how leading organizations are closing them, and what the data says about where agentic IAM goes from here.

\n\n

JumpCloud

\n\n