ServiceNow gives AI agents a passport, and limits on what they can do - Help Net Security
ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness.
ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness.
Specifically, AI Passport is a new authority layer that gives enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorized to do at every point in a multi-agent workflow.
ServiceNow also enables enterprises to discover what AI is running, control what AI agents do, and measure spend against outcomes with a broadened set of governance capabilities.
The ServiceNow AI Platform runs on a single unified data model, which enables governance decisions to happen automatically across asset intelligence, identity security, and AI observability, eliminating manual handoffs between teams: Beyond discovering what AI is running, enterprises need visibility into whether that AI is delivering value and operating within budget.
NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration connector that extends the platform’s governed access to the AI tools teams already use.
He predicts at least two major enterprises outside the AI sector will suffer a critical AI-related incident within 18 months.
They need structure: which data or tools they can access, clear rules for what actions they’re allowed to do, and an auditable record of who authorized it.
Qualys has announced TruRisk Eliminate 2.0 with TruConfidence, a new remediation intelligence and orchestration engine that powers Qualys’ vision for Autonomous RemOps, a new category for the frontier AI era.
In this Help Net Security interview, Michael Scott, CISO at Immuta , talks about how organizations should handle permissions for AI agents.
AI Passport is a cryptographically signed credential that AI agents refer to at runtime, including environments such as NVIDIA OpenShell, to verify their authorized scope, grounded in enterprise business context for governed decisions.
What happened
ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness.
Specifically, AI Passport is a new authority layer that gives enterprises runtime control over what AI agents and Model Context Protocol (MCP) servers are authorized to do at every point in a multi-agent workflow.
What changed
ServiceNow also enables enterprises to discover what AI is running, control what AI agents do, and measure spend against outcomes with a broadened set of governance capabilities.
The ServiceNow AI Platform runs on a single unified data model, which enables governance decisions to happen automatically across asset intelligence, identity security, and AI observability, eliminating manual handoffs between teams: Beyond discovering what AI is running, enterprises need visibility into whether that AI is delivering value and operating within budget.
Who is affected
NinjaOne has announced Katana AI, an agentic AI technician that supports and elevates IT workers, and the NinjaOne MCP server, an agentic orchestration connector that extends the platform’s governed access to the AI tools teams already use.
He predicts at least two major enterprises outside the AI sector will suffer a critical AI-related incident within 18 months.
Why it matters
They need structure: which data or tools they can access, clear rules for what actions they’re allowed to do, and an auditable record of who authorized it.
Qualys has announced TruRisk Eliminate 2.0 with TruConfidence, a new remediation intelligence and orchestration engine that powers Qualys’ vision for Autonomous RemOps, a new category for the frontier AI era.
Technical details
In this Help Net Security interview, Michael Scott, CISO at Immuta , talks about how organizations should handle permissions for AI agents.
AI Passport is a cryptographically signed credential that AI agents refer to at runtime, including environments such as NVIDIA OpenShell, to verify their authorized scope, grounded in enterprise business context for governed decisions.
Response
It has changed what our team can get through, while maintaining an auditable, human-in-the-loop standard.” GRC was built for an era where the process of managing risk was predictable: document it, mitigate it, move on.
Built on Qualys’ extensive experience of deploying half a billion patches with less than 0.1% rollback, of which 40% were deployed autonomously, TruRisk Eliminate combines the latest advances in autonomous remediation, remediation intelligence and orchestration to help organizations confidently eliminate cyber risk at machine speed while maintaining business resiliency and continuity.
What security teams should do
It brings together the capabilities Qualys introduced over the past two quarters, including the AI-powered Patch Reliability Score, intelligent wave-based remediation orchestrated by Agent Sara, peer-to-peer distribution and compensating controls with intelligence drawn from half a billion real-world patch deployments.
Katana AI gives technicians a summary and recommended next steps in one view, no more searching or pulling daily reports to get the data you need instantly,” said Randy Hyder , MSP Manager, Range MSP.
Attribution
Help Net Security: ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness.
Help Net Security: Optro has expanded its portfolio of autonomous AI agents for enterprise risk teams.
Help Net Security: Qualys has announced TruRisk Eliminate 2.0 with TruConfidence, a new remediation intelligence and orchestration engine that powers Qualys’ vision for Autonomous RemOps, a new category for the frontier AI era.
Help Net Security: In this Help Net Security interview, Michael Scott, CISO at Immuta , talks about how organizations should handle permissions for AI agents.