IBM introduces tools that give AI agents identities, permissions and a kill switch
At TechXchange 2026, IBM announced tools that give AI agents their own accounts, short-lived credentials and real-time revocation of access.
On October 27, 2026, at TechXchange 2026 in Atlanta, IBM announced new capabilities to discover, verify, contain and evaluate AI agents. HashiCorp Vault 2.2 and Agent Identity are generally available, while agent discovery and the kill switch in watsonx Orchestrate are in tech preview.
In a press release issued at TechXchange 2026 in Atlanta on October 27, 2026, IBM announced new capabilities that help companies discover, verify, contain and evaluate AI agents. A Gartner projection cited in the release puts the average Fortune 500 company at more than 150,000 AI agents by 2028. Citing the same Gartner source, the release adds that only 13 percent of organizations believe the right governance for AI agents is in place.
- HashiCorp Vault 2.2 assigns each agent a separate secured account, renews its credentials automatically and adds post-quantum encryption; IBM says Vault will also issue short-lived credentials that give each agent only the access it needs.
- Agent Identity keeps a record of who owns each agent, where it is in its lifecycle and what it is allowed to do; if an agent tries something outside its permissions, its access can be cut off immediately.
- watsonx Orchestrate can discover agents built on Amazon Bedrock, Microsoft Foundry and Google Gemini, run agents in isolated sandboxes and shut them down, and track cost by agent, model and token use.
- Vault 2.2, Agent Identity and the Orchestrate evaluation features are generally available, while agent discovery and the kill switch are in tech preview. IBM's product post says watsonx Orchestrate can connect directly to Microsoft Entra and IBM Verify as identity providers.
Why it matters
As agents start taking actions in systems such as email, ERP or CRM, the kind of permissions given to employees may also need to be given to software. IBM's announcement can be read as a sign that these practices are turning into ready-made products: giving agents their own identities, applying least privilege and being able to cut access at once. Companies in Türkiye that run agent pilots would do well to record from the start which agent can reach which data, who owns it and how it can be stopped.
Companies that want to manage user and role-based permissions in one place can see our menu and permission management page.
Sources
More articles
Microsoft to process Claude models in Copilot inside the EU Data Boundary by the end of 2026
Microsoft says Anthropic's Claude models in Copilot will move into the EU Data Boundary. The target is the end of 2026, and the Claude setting is off by default in the EU and EFTA.
November 5, 2026 · Source: MicrosoftGoogle makes Gemini Omni 1.2 Flash video model generally available with clips up to 15 seconds
Google made its video generation and editing model Gemini Omni 1.2 Flash generally available on 5 November 2026. It is rolling out to the Gemini API, Google Cloud, Flow, Google Vids, the Gemini app and Google Ads.
November 5, 2026 · Source: Google BlogShopify's third-quarter revenue rises 32 percent to 3.74 billion dollars
In third-quarter results published on 3 November 2026, Shopify reported revenue up 32 percent and gross merchandise volume (GMV) up 29 percent. The company expects revenue growth in the low thirties percent again in the fourth quarter.
November 3, 2026 · Source: Shopify (SEC 8-K)