Netwrix Adds AI Agent Discovery and 102 Entra ID Security Checks

New capabilities help organizations identify unmanaged AI identities and assess Microsoft Entra ID security risks more effectively.

Hero Approved GitHub

Key Takeaways:

  • PingCastle 4.0 adds 102 Microsoft Entra ID risk assessments.
  • Organizations can now discover AI agents and review their permissions.
  • Threat Manager introduces Azure Files ransomware and configuration monitoring.

As AI agents rapidly become part of enterprise environments, organizations are facing a growing challenge in tracking and governing these non-human identities. Netwrix’s latest updates to PingCastle and Threat Manager aim to address this blind spot by providing greater visibility into AI agents, expanded Microsoft Entra ID risk assessments, and stronger threat detection across cloud environments.

Organizations are rapidly deploying AI agents, but many lack proper governance, inventory management, and oversight for these identities. This research shows that poor management of AI-related identities is associated with a higher likelihood of security breaches.

“Earlier this year, we gave organizations visibility into what AI agents can access. This release goes a layer deeper: which agents exist at all,” said Jeff Warren, CPO at Netwrix. “Our research found fewer than one in five organizations fully govern non-human identities, and agents are the fastest-growing category. You can’t review access for an identity you don’t know you have.”

PingCastle adds 102 Microsoft Entra ID risk checks

Netwrix PingCastle 4.0 now provides 102 Entra ID risk checks, which enables organizations to evaluate identity security risks across both Active Directory and Microsoft Entra ID using a unified assessment approach. Organizations can gain visibility into which AI agents exist in their environments and understand the permissions they hold, helping security teams address a growing blind spot in identity governance.

This is particularly important because AI agents are increasingly acting as non-human identities with access to business resources, but many organizations lack formal processes to track and manage them.

Threat Manager has also introduced support for Azure Files protection, including detection of ransomware activity, unusual behavior, and risky configuration changes such as overly permissive file-sharing settings.

Overall, these enhancements are designed to complement Microsoft’s native security tools by providing independent assessment and broader visibility into identity-related risks across cloud environments. Netwrix considers this release as part of its broader strategy to unify identity and data security within its 1Secure platform.