Lasse Andresen

We are giving AI agents broad access and calling it control. I spent much of my career in identity and access management helping organizations control who could access what. With agents, we have to confront the limits of that question. An agent can operate entirely within your permissions and still do something you never asked for. Ask it to prepare a customer briefing. Your permissions might also let it export the customer database, update records or change contract terms. All permitted. None requested. Delegating your authority leaves the agent to interpret how much of it the task requires. That is a control gap. The intent of the request needs to become part of the access decision, alongside context about the data, relationships and trust involved. And it needs to remain enforceable as work passes across tools and other agents. That is the idea behind intent-based access control. Before we give agents more autonomy, we need a better answer to “was this actually part of the task?” We’ll show what that looks like in Beyond Delegation: Intent-Based Access Control for AI Agents, with a live demo. Hope you can join us! watch.getcontrast.io/registe…

Traditional apps follow pre-set execution paths. Agentic AI builds its own path dynamically as it runs. Governing decisions you cannot map in advance is a completely new challenge for enterprise security. Here is why Zero Trust must evolve for AI indykite.ai/download-center/…