Descope’s Agentic Identity Hub 3.0 takes aim at shadow AI agents inside companies

What it does

Descope has launched Agentic Identity Hub 3.0 to target AI agents created or used inside companies without central IT control. These so-called shadow AI agents arise when employees build or adopt AI tools independently to automate work or analyze data. The platform aims to secure, monitor, and govern these internal AI agents by verifying their identity and access rights. This release refocuses Descope’s identity technology specifically on the risks from unmanaged AI tools running inside organizations.

Why it matters

Shadow AI agents expose companies to operational and security risks because they operate outside approved IT oversight. Employees using unsanctioned AI tools can inadvertently create vulnerabilities by giving these agents excessive access or mishandling sensitive data. Descope’s new platform forces a stronger identity and permissions framework on these AI agents. This tightens control and accountability, making it harder for rogue AI actions or data leaks to go unnoticed. For organizations, this raises the cost of shadow AI by increasing auditability and compliance demands, limiting the “wild west” nature of employee-built AI processes.

Who it is for

Agentic Identity Hub 3.0 is aimed at enterprise security and IT teams tasked with managing AI-based automation and services in their environments. It is relevant for companies seeing rapid internal AI tool adoption but struggling to track or secure those agents effectively. IT operators wanting to prevent data exposure or insider risk related to AI will benefit most. Founders and AI builders should also note this product as it shapes how AI agent identity management becomes a foundational control in enterprise settings.

The catch

The product hinges on companies adopting a stricter identity verification and permission model for shadow AI. This might slow internal AI innovation by forcing employees to conform to IT policies they might find restrictive or cumbersome. Descope’s approach trades some user agility for security and governance. Organizations will need to balance oversight with allowing teams to experiment safely, or risk either rogue AI agents or frustrated staff bypassing controls.

What to watch next

Watch for how widely enterprises embrace this new level of AI agent governance. It will be telling if IT frustration or user resistance slows adoption. Also track whether more companies declare shadow AI risks publicly, demanding solutions like Descope’s. The effectiveness of identity-based controls against AI-specific insider threats will be an early test case for securing AI in the workplace. Improvements or integrations with other security tooling will also indicate market traction.

AI Quick Briefs Editorial Desk