Agents are making headlines for going rogue, exposing sensitive company data and, in one case, deleting an entire production database.
Agents need broad access to data and tools to be useful, which is precisely what makes them risky, and role-based access control was never built to judge what a non-human identity does with the access it has.
"The question is no longer ‘Can a user access this data?’ but ‘In this context, should this agent be allowed to take action on this data?’" said
How Agent IBAC Works
Agent IBAC checks whether an agent’s reasoning, tool use, and data access are consistent with its assigned instructions, and alerts on or blocks actions that do not align.
When an agent crosses the line, Atlas can quarantine the identity behind it and block everything that follows for a defined window.
Key Capabilities:
- Intent drift detection: Compares the instruction an agent received to its reasoning, tool calls, and data access with lenient, balanced, and strict sensitivity settings.
- Full session evaluation: Reviews every prompt, response, and tool call in a session to catch risk that builds gradually, such as multi-turn jailbreak attempts. Customers can also define their own session policies in plain language.
- Quarantine: Blocks an identity or session after a violation for a window the customer sets, with admin controls to lift, extend, or make it permanent.
- Human in the loop: Routes a flagged action to a person for approval rather than blocking it outright.
- Complete audit trail: Records every prompt, response, and tool execution alongside the action Atlas took, for security, governance, and compliance teams.
Agent IBAC works with the agents and AI tools organizations already run, including
Additional Resources:
- Learn more about Agent IBAC.
- Request your Varonis Atlas demo.
- Visit our blog, and join the conversation on LinkedIn and YouTube.
About Varonis
Varonis (Nasdaq: VRNS) secures AI and the data that powers it. The Varonis platform gives organizations automated visibility and control over their critical data wherever it lives and helps ensure safe and trustworthy AI from code to runtime. Backed by 24x7x365 managed detection and response, Varonis gives thousands of organizations worldwide the confidence to adopt AI, reduce data exposure, and stop AI-powered threats.
Investor Relations Contact:
Tim Perz
Varonis Systems, Inc.
646-640-2112
investors@varonis.com
News Media Contact:
Rachel Hunt
Varonis Systems, Inc.
877-292-8767 (ext. 1598)
pr@varonis.com

![]()
2026 GlobeNewswire, Inc., source

















