NEW YORK, March 18, 2026 (GLOBE NEWSWIRE) — Token Security, the leader in identity-first AI agent security, today announced intent-based AI agent security, a new approach that governs autonomous agents in enterprise environments by aligning their permissions with their intended purpose.
As organizations rapidly deploy autonomous AI agents across enterprise infrastructure, traditional security models are struggling to contain the risks. Token Security has been advancing the concept of intent-based security for AI agents, and using identity as the control plane for governing autonomous systems. Because AI agents interact with enterprise systems through service accounts, API credentials, and cloud roles, identity controls are a natural enforcement layer for governing what agents can access and execute.
The company recently published an overview examining why AI agents break traditional access models and outlining how intent-based identity governance can enable organizations to safely scale agentic AI: https://www.token.security/blog/why-ai-agent-security-must-be-intent-based
“Prompt filtering and guardrails were not designed to fully contain the security risks introduced by autonomous AI agents,” said Itamar Apelblat, Co-Founder and CEO of Token Security. “With our intent-based approach, the Token Security platform understands what AI agents are supposed to do and ensures they only have the permissions required to achieve their specified goals. As soon as their intent changes or they demonstrate risky behavior, our solution automatically intervenes to neutralize the threat.”
From Guardrails to Intent-Based Security
Since AI agents are non-deterministic and goal-oriented, two agents with identical permissions can behave very differently depending on what they are trying to accomplish. This unpredictable nature limits the ability of static permissions, inherited human roles, or past behavior to contain agent security risks.
Token Security’s Intent-Based AI Agent Security introduces a new enforcement model that extends beyond prompt filtering and static policy-based controls to enforce dynamic authorization. The Token Security platform operationalizes intent-based AI agent security through five core capabilities:
- Continuously discovering AI agents, their owners, and their access
- Understanding declared and observed agent intent to decipher what they are designed and scoped to do
- Dynamically creating and enforcing least privilege access policies aligned to defined intent
- Flagging and constraining actions that fall outside established intent boundaries
- Applying lifecycle governance controls to prevent access drift and orphaned agents
“Intent is the missing dimension in AI agent security, since security teams must understand what an agent is designed to accomplish before they can safely govern what it can access,” added Ido Shlomo, Co-Founder and CTO of Token Security. “AI agents shouldn’t inherit the full permissions of the humans who create them. When they do, organizations lose visibility and control over what those systems can access and execute. By understanding what an agent is designed to do and enforcing access based on its stated purpose, organizations can keep autonomous systems operating within safe boundaries.”
Token Security was recently named an RSAC 2026 Innovation Sandbox Award Finalist, and will demonstrate these market-differentiating capabilities on stage on Monday, March 23rd at the RSA Conference. Conference attendees can also visit the Token Security booth (South Hall 1969).
Availability
Token Security’s Intent-Based AI Agent Security capabilities are available immediately as part of the Token Security platform.
About Token Security
Token Security accelerates the secure adoption of agentic AI by discovering AI agents across the enterprise, understanding their context and risk, and enforcing policies that govern their access and behavior. The platform provides continuous visibility, lifecycle management, and least-privilege enforcement to help organizations control autonomous AI agents operating across cloud, SaaS, and enterprise environments, eliminating blind spots, reducing risk, and ensuring compliance at scale.
Token Security is backed by Notable Capital, Crosspoint Capital, and TLV Partners. token.security
Media Contact:
Marc Gendron
Marc Gendron PR for Token Security
+1 617 877 7480
[email protected]
A photo accompanying this announcement is available at https://www.globenewswire.com/NewsRoom/AttachmentNg/c2698f70-b8c1-4afe-90d2-0dab39b191d9
