In partnership with
This week on SHIFT
Raise your hand if your organization is deploying AI agents with access to sensitive data. Now keep it up if you know how many agents you actually have, and feel confident managing the associated risk. This week from Las Vegas, where AI and security conferences have agentic risk front and center, we dig into the identity crisis inside enterprise AI: companies flat-out don’t know how many non-human identities are running in their systems, or what sensitive data those agents can touch.
Jennifer sits down with Matt Mills, president of SailPoint. The company has spent 20 years governing who gets access to what inside enterprises. Now that “who” includes machines. Mills explains what SailPoint could suddenly see when it merged its human and AI-agent identity products into one platform, and why he insists every agent still needs a human who answers for it.
Advertisement
Domain Names + Web and Email Hosting Done Right
Tired of overpaying GoDaddy or Namecheap? There's a smarter option with Porkbun!
Porkbun is the domain registrar trusted by creators, developers, entrepreneurs, and anyone who wants low prices without the nonsense or the forced upsells.
Here's why so many people are making the move to the Bun:
• Most domains sold at cost
• Low, transparent registration and renewal pricing
• Free features like WHOIS privacy and SSL certificates
• Powerful web and email hosting options
• Real human support 24/7, 365 days a year
• Named the #1 domain registrar by Forbes Advisor and USA Today
Whether you're launching a business, building a personal brand, starting a side project, or creating your very first website, Porkbun makes the whole thing easy.
Three things to listen for
1. The 97% problem.
SailPoint’s research finds 97% of AI agents have access to sensitive data but only about one in five security leaders feels confident managing them. A big reason: engineers hard-code credentials and permissions into agents, leaving them effectively invisible and ungoverned.
2. “You can’t put a Waymo in jail.”
Mills argues accountability has to trace back to a person, and that whoever authorized and certified an agent is responsible for it. Keeping human and non-human identities on one platform is what lets a company cut off a misbehaving agent’s access immediately.
3. Vendors need to show their work.
After months of vendors claiming “we can do that” and falling short, buyers are demanding proof on their own platform, network, and data. It’s the very thing sales teams spent a decade avoiding.
“If somebody told you they got this all figured out, you should be skeptical.”
Listen now
SHIFT publishes every week. If someone forwarded this to you and you'd like to get it directly, subscribe at shiftshow.ai. And if you have a question, a guest suggestion, or a story we should cover, reply to this email. Jennifer reads them all.