P0 Security to Showcase Agentic Runtime Access Control Capabilities at Identiverse 2026
SAN FRANCISCO--( BUSINESS WIRE)-- P0 Security, creator of the Authz Control Plane™, today announced new capabilities for agentic runtime access control that help organizations manage agents across the enterprise. The company will showcase the solution at Identiverse 2026, where attendees can see how P0 enforces access policy across the full action chain, establishing fine-grained controls with real-time context.
AI agents are actively querying enterprise data, invoking tools, modifying systems and taking action across applications in a single workflow. They typically do so using credentials that belong to the humans or non-human identities that triggered them. When access controls are weak for users and NHIs, that weakness flows into every agent action downstream, creating a new class of runtime control failures: agents that act with too much authority and naive, non-deterministic intent. Such actions should be limited, escalated or blocked before execution.
“Claude Code is reshaping our access risk model,” says Venkat Venkatraju, Cloud Security Engineer at Splunk. “Engineers could use agents to automate scripts on remote servers or access sensitive data on production databases. One unintended command, rm–rf or mkfs, executed with an engineer's authority, can have catastrophic consequences. Every agent action needs to be evaluated against policy at runtime, not after the fact.”
The shift is being recognized across the industry. According to Gartner*, “the primary risk is not what the AI says, but what the AI does. The focus must shift from prompt injection to agent behavior analysis and identity traceability. If an AI agent cannot prove who it is acting for and why, it should not get access to tools and data.”
What’s new in this release
P0's Authz Control Plane™ for Agents builds on the company's foundation in Zero Standing Privilege and Just-in-time access. Rather than treating agent access as a static credential challenge, P0 evaluates access at the moment an agent acts, combining the invoking identity, agent identity, tool authorization and resource entitlements into a single runtime enforcement model, with automatic revocation once a task is complete.
Core capabilities include:
“The first wave of agent adoption focused on what agents could do,” said Shashwat Sehgal, CEO and Co-Founder of P0 Security. “The next wave will focus on what agents should be authorized to do. We’ve spent years helping organizations implement zero-standing privilege across human users and non-human identities. Agentic systems build on those same foundations. Security teams now need a way to evaluate and control access at runtime, scoped to the specific task and tied to an accountable authority. That’s the problem we’re focused on solving.”
These expanded capabilities are being demonstrated this week at Identiverse 2026.
P0 Security at Identiverse
At Identiverse, P0 will demonstrate how organizations can discover shadow agents across environments including Claude, Microsoft Copilot, Salesforce Agentforce and custom agent frameworks; enforce Zero Standing Privilege across agents, MCP tools and infrastructure; and audit every authorization decision with a kill switch for rogue actions.
Where: Mandalay Bay, Las Vegas
When: June 15-17, 2026
Booth: 923 and NHI kiosk 14
Schedule a meeting: here
Disclaimers
Gartner is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.
Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
* Emerging Tech: The Future of AI Security Is in Securing Agent Actions, Not Prompts" (G00845912), published February 20, 2026, authored by Mark Wah and David Senf.
About P0 Security
P0 Security is the unified AuthZ Control Plane™ for agents and users, helping enterprises secure runtime access for the modern workforce. P0 governs the full action chain across agents and users, enforcing least-privilege policy with real-time context, so organizations can control what agents do and with whose authority before they take action in sensitive systems.
Built on a foundation of Zero Standing Privilege and runtime policy enforcement, P0 replaces broad permissions and static credentials with just-enough privilege, just-in-time access and fully traceability activity – avoiding the access control failures that expose enterprise data and critical systems.
Zero Standing Privilege. Zero added friction. Because secure runtime access is Priority Zero™. Learn more at www.p0.dev.