Bringing Governance and Visibility to Machine and AI Identities

In a recent interview, Archit Lohokare, the CEO of AppViewX, discussed the pivotal moment when machine identities and AI agent identities began to converge into a unified challenge. Drawing from his extensive background with IBM and CyberArk, Lohokare highlighted the transition from systems driven by human interaction to those operated autonomously by machines and AI.

Lohokare emphasized how the rapid adoption of AI technologies, such as ChatGPT, marked a significant turning point. For over two decades, digital transformation was largely human-centric, with identity security focused on human users. However, the rise of AI heralded a new era where productivity stems not from additional human resources but from autonomous machines and AI agents. This shift underscored that the issues surrounding machine identity and AI identity are intertwined, creating a complex challenge that cannot be addressed with platforms designed for human identity.

He stated, "The next generation of market-leading identity security platforms will be those purpose-built to secure machine and AI agent identities, not humans." This realization set the stage for AppViewX's innovative approach, in collaboration with Eos, to provide a holistic security solution encompassing Certificate Lifecycle Management (CLM), Public Key Infrastructure (PKI), and agent governance.

Integration of CLM, PKI, and Agentic Governance

Lohokare outlined the integration of CLM and PKI with Eos's agentic governance, which enhances security for both machine identities and AI agents. AppViewX already has a solid foundation in managing machine identities through CLM and PKI. With Eos, the platform now adds an agentic layer to include AI agents, enabling organizations to discover, govern, and secure not only certificates but also the autonomous agents that access resources.

For security engineers operating within a Security Operations Center (SOC), this integration presents a unified control plane that allows them to:

• Discover machine identities and AI agents.
• Enforce consistent governance and policy.
• Monitor, audit, and control access and behavior.

The primary benefit is the simplification of identity and access management, reducing risks associated with both machines and AI agents as they scale rapidly.

Preserving Engineering Culture During Integration

Lohokare, alongside co-founder Kashyap Ivaturi, is focused on maintaining the engineering culture that made Eos appealing while integrating into AppViewX. Ivaturi played a crucial role in developing an AI-native development lifecycle (AI-DLC), utilizing tools to accelerate innovation. His experience spans both small teams and large organizations, equipping him with strategies for scaling without compromising core values.

Both AppViewX and Eos share a commitment to fostering small, empowered teams and adopting AI-driven development practices. Lohokare noted that the goal is not to impose a new culture but to amplify existing successful practices, ensuring the agility and creativity of Eos are preserved while benefiting from AppViewX's scale and discipline.

Addressing Governance Blind Spots

One of the most pressing issues highlighted by Lohokare is the blind spot in how enterprises currently govern AI agents. Many organizations still apply traditional identity models that are human and workload-centric to the dynamic nature of AI agents. These agents are capable of spawning other agents and delegating privileges, yet they are often treated like service accounts or API keys, with limited visibility and coarse permissions.

This misapplication of governance creates significant gaps in identity management, context, and accountability. Organizations frequently lack insight into which agent is acting, what resources it can access, and how that access propagates. Lohokare stressed the necessity of a unified control plane that manages identity, posture, privilege, and behavior in real-time to mitigate the risks associated with scaling agentic systems.

AppViewX's Unique Position in the Market

As the machine identity management sector becomes increasingly crowded with competitors such as CrowdStrike and Venafi, Lohokare asserted that AppViewX stands out due to its foundational design as a next-generation SaaS platform dedicated to machine identity lifecycle management. Unlike many newer entrants that treat machine identity as an ancillary feature, AppViewX focuses on a comprehensive approach that encompasses discovery, issuance, governance, control, and compliance.

With the integration of AI agent identity through Eos, AppViewX has unified CLM, PKI, and agent governance under a single control plane. Lohokare concluded that this structural advantage is not easily replicated by competitors that primarily extend existing endpoint products or legacy systems.

Source: Help Net Security News