Skip to content
File

IBM AI-agent governance and security

This dossier follows IBM's agent identity, permissions and oversight tools, their availability and established limitations.

Last updated : 1 key moments

Where things stand

As of 28 October 2026, IBM distinguishes available identity and evaluation tools from discovery and containment still in preview.

IBM extends governed identity and access controls to AI agents

IBM introduced new AI-agent governance tools at its TechXchange conference in Atlanta on 27 October 2026. Agent Identity and HashiCorp Vault 2.2 are announced as generally available, while some oversight features remain experimental.

Corporate logo of IBM
IBM logo, used for identification. — Paul Rand / IBM, Wikimedia Commons — public domain (PD-textlogo).

IBM says each agent can have an identified owner and defined authority. Vault supplies short-lived credentials limited to necessary resources and revocable when access conditions change.

In watsonx Orchestrate, evaluation and cost-tracking capabilities are available; discovery of third-party agents and containment, including a kill switch, remain in technical preview. That distinction matters to IT teams: announcing a control does not mean all its components are ready for routine deployment. Real-world effectiveness still needs assessment in each environment.

Sources 4