Exabeam adds AI agent threat detection to New-Scale platform

Exabeam has announced the integration of Google Agentspace and Model Armour telemetry into its New-Scale Security Operations Platform to enable organisations to detect and monitor threats originating from autonomous AI agents acting as digital insiders.

As AI-driven agents increasingly perform work on behalf of users and interact with sensitive business data, enterprises are facing new forms of insider risk. According to Exabeam's "From Human to Hybrid: How AI and the Analytics Gap are Fueling Insider Risk" study, 93% of organisations surveyed expect to see a rise in insider threats linked to AI, and 64% consider these internal risks to be a higher priority than threats from external actors.

Digital insiders

The move signals a shift in the security landscape, with digital agents now able to exhibit risks similar to human insiders. Exabeam noted that the behaviour of these AI agents can become misaligned, malfunction, or be deliberately subverted - posing a threat profile that is not always detectable by existing SIEM or XDR tools. Many traditional solutions lack the behavioural intelligence necessary to identify unexpected or malicious agent activity.

As organisations adopt AI to automate tasks and decision-making, the potential for AI-based insider compromise expands. This new integration with Google Agentspace and Model Armour allows the New-Scale Platform to baseline and analyse both human and agent behaviour, extending the reach of Exabeam's behavioural analytics.

"This is a natural evolution of our leadership in insider threat detection and behavioural analytics," said Steve Wilson, Chief AI and Product Officer at Exabeam. "Exabeam solutions are inherently designed to deliver behavioural analytics at scale. Security operations teams don't need another tool - they need deeper insight into both human and AI agent behaviour, delivered through a platform they already trust. We're giving security teams the clarity, context, and control they need to secure the new class of insider threats."

The New-Scale Security Operations Platform now leverages detailed telemetry from Google Agentspace and Model Armour to detect agent intent, identify behavioural drift, and highlight possible compromise. This equips security teams to more effectively monitor a workforce that is part human, part automated.

Analyst insights

Central to this capability is Exabeam Nova, described as the intelligence layer within the platform which interprets and contextualises agent behaviour in real time. The system provides explainable and prioritised threat insights, allowing security analysts to differentiate between normal automation and potentially abusive activity by AI agents.

By operationalising data from Google's agent and model security telemetry, Exabeam Nova aims to address situations where AI agents could be acting outside of their intended parameters or be exploited for malicious purposes.

"AI agents are quickly changing how business gets done, and that means security must evolve at the same rate," said Chris O'Malley, CEO at Exabeam. "This is a pivotal moment for the cybersecurity industry. By extending our behavioural analytics to AI agents, Exabeam is once again leading the way in insider threat detection. We're giving security teams the visibility and control they need to protect the integrity of their operations in an AI-driven world."

The collaboration with Google Cloud is intended to help customers respond to the growing challenge posed by the integration of AI agents into day-to-day business operations. Vineet Bhan, Director of Security and Identity Partnerships at Google Cloud, commented on this broader challenge, stating:

"As businesses integrate AI into their core operations, they face a new set of security challenges. Our partnership with Exabeam is important to addressing this, giving customers the advanced tools needed to protect their data, maintain control, and innovate confidently in the era of AI."

Industry benchmarks

By connecting visibility across human and AI-driven activity, Exabeam is aiming to set a new benchmark in enterprise cybersecurity. With the ability to detect and respond to both traditional and AI-powered insider threats, the company's approach is positioned as a response to the changing threat environment faced by organisations adopting automation and AI technologies.

The latest enhancements to the platform are intended to allow organisations to maintain control and integrity over their systems as AI agents become more integral to business operations across different sectors.