ThreatLocker launches control for corporate AI agents

ThreatLocker has launched Zero Trust AI Control, a tool designed to manage what AI agents can do inside corporate systems. The product is aimed at organisations deploying agentic AI across their environments.

The tool applies external controls to AI agents, allowing security teams to decide which systems, applications and services an agent may access. Those limits remain in place even when an agent calls on other software, scripts or browser-based services to complete a task.

The launch comes as businesses give AI tools a more active role in day-to-day operations, moving beyond information retrieval to taking actions inside business systems. That shift has created a security issue because many existing safeguards still rely on the AI system following its own rules.

Zero Trust AI Control uses a default-deny model, allowing an AI agent to reach only the resources needed for a defined job while blocking access to everything else. The controls sit outside the AI deployment itself, helping maintain boundaries if an agent behaves unexpectedly.

According to ThreatLocker, security teams can begin with pre-built policies and then adjust them to suit their own environment. The product is designed to reduce the amount of manual work involved in setting limits around AI activity.

In current enterprise use, a single request to an AI agent can set off a chain of actions across multiple parts of an IT estate. ThreatLocker says its new tool is built to govern that workflow from start to finish by controlling what agents can access, execute and connect to as they move between applications and services.

Broader controls

ThreatLocker positioned the product as part of a wider set of controls around AI use. Used alongside ThreatLocker Allowlisting and Web Content Control, the new tool is intended to let security teams decide both which AI applications are permitted into an environment and what approved agents may do once active.

That approach reflects a wider debate in cybersecurity over how to contain software that acts with increasing autonomy. AI agents can carry out tasks by interacting with browsers, internal tools and external services, making access management more complex than traditional user-based permissions.

ThreatLocker, which focuses on zero trust cybersecurity products, says it serves more than 70,000 organisations worldwide. The business is headquartered in Orlando, Florida, and also has offices in Dublin, Dubai and Brisbane.

Danny Jenkins, Chief Executive Officer and Co-Founder of ThreatLocker, set out the company's view in comments accompanying the launch.

"The security challenge has fundamentally changed because AI agents aren't just providing information anymore. They're being used to take actions across an organisation's environment.

"Organisations around the world need a way to adopt AI with the peace of mind that they aren't handing over the keys to their environments," he said.