Keyfactor unveiled an innovative feature for agentic AI security which leverages PKI identity for the authentication of AI agents. The action is a clear example of how companies can implement cryptographic trust to self-governing AI agents. As agentic AI security is emerging as a major issue, the firm intends to provide businesses with a robust identity base for self-governing systems.
Extending Zero Trust to AI Agents
As businesses deploy AI agents to automate workflows. The risks of ungoverned AI actions grow quickly. Unlike traditional software, autonomous agents can act across APIs, systems, and cloud resources. These AI agents without distinct identities are a significant security risk. Consequently, Keyfactor’s PKI identity solution introduces X.509 certificates to each agent. Thus, it provides a verifiable identity for every agent and system interaction.
The solution changes static credentials such as API keys and client secrets to certificate-based flows. Moreover, it enables mutual TLS and has been automated for short-lived agents running in containers.
Benefits and Scope of the Solution
Moreover, the credentialing approach brings major benefits. Agents receive unique certificates, reducing misuse and ensuring actions are auditable. Regulatory readiness improves because certificate-based authentication aligns with compliance demands. The automation of issuance, rotation, and revocation at scale supports enterprise deployment of thousands of AI agents.
In addition, by embedding access policies inside certificates (what systems agents can access, what operations they can perform, and when), governance becomes inherent rather than after-the-fact. Organizations using this approach are better able to trust agentic AI security while maintaining oversight.
Finally, as the field of agentic AI grows, the need for identity-centric security frameworks becomes critical. Keyfactor’s announcement highlights that securing agentic AI is not just about monitoring behaviour, but about authenticating and governing each agent’s identity and actions from day one.
To explore how Security Operations Centers (SOC) play a crucial role in defending against modern cyber threats, read our latest SOC News.
Source: Businesswire