Drata expands AI agent governance to address insider threats in enterprise AI

Markowitz argues that existing identity and access management (IAM) frameworks, designed for humans and vendors, fail to govern agents effectively. He emphasizes the need for real-time discovery of agents, inline policy enforcement before actions execute, continuous monitoring for scope drift, and tamper-evident audit trails. Drata’s platform now combines automated evidence collection, third-party risk management, and AI agent governance—discovering agents, enforcing policies, and recording decisions for auditability. The company claims this approach is critical as enterprises scale autonomous AI, where traditional security tools prove insufficient.