Drata, an Agentic Trust Management Platform provider, has launched its AI Agent Governance solution in limited availability to address the critical gap between enterprise AI adoption and regulatory compliance. As enforcement of the EU AI Act begins, organizations face increasing pressure to prove traceability and control over AI agents operating within their environments. The new platform allows enterprises to discover, monitor, and govern these agents in real time, preventing unauthorized actions before they occur rather than detecting them after the fact.

The platform is built on three core layers: the Drata Sensor, which monitors AI activity on managed devices; the MCP Proxy, which evaluates agent tool calls against policy at the point of execution; and Telemetry, which creates a tamper-evident evidence feed. Adam Markowitz, CEO of Drata, emphasized that while major labs like Anthropic have robust safety infrastructure, most enterprises lack basic guardrails. "The ability to proactively discover, monitor, and govern those AI agents in real time is how security teams are getting ahead of it," Markowitz said.

Core Capabilities

Unlike existing tools that offer only retrospective dashboards, Drata’s approach focuses on inline enforcement and proactive discovery. The system operates through three distinct capabilities:

Policies are authored in plain English and compiled into machine-enforceable rules that stop violating actions inline. Teams can simulate policies against historical traffic to validate controls with zero false-positive risk before enabling enforcement in production.

Market Context and Adoption

The launch coincides with heightened scrutiny following incidents at OpenAI, Hugging Face, and Anthropic, where agents operated past their intended scope. Tushar Badlani, a security and governance specialist, noted that agents represent a "third population" moving at machine speed without established playbooks for access management. He stated, "Agent identity needs the same rigor we built for human and third-party risk: discovery, ownership, and proof an auditor can stand behind."

Early access customers are already using the platform in production. Macky Ruiz, IT Systems Administration Manager at Sonatus, reported that connecting their environment provided an immediate inventory of running agents. "It gives us one standard every agent is held to, instead of chasing down what each developer is doing on their own," Ruiz said.

What the Numbers Show

The strategic timing of this release highlights a structural shift in enterprise risk management. With 8,500+ organizations worldwide already using Drata’s trust network, the expansion into AI agent governance signals that compliance frameworks are evolving from static documentation to continuous, automated verification. The focus on Anthropic as the initial integration partner suggests a prioritization of high-risk, high-autonomy agent environments where the cost of failure is highest. By mapping agent governance to existing controls for ISO 42001 and AIUC-1, Drata is positioning itself not just as a security tool, but as a foundational component of enterprise audit readiness.

Drata has launched AI Agent Governance, a new capability within its trust platform designed to help enterprises manage and secure AI agents. The launch addresses a 30% increase in security questions related to AI governance, with 89% of companies currently unable to answer these inquiries effectively. The new product aims to empower security leaders to see, authorize, monitor, and prove the posture of AI agents operating within their environments.

The introduction of AI Agent Governance is based on data from the Drata Trust Graph, which processed over 2.1 million security questions in the last nine months. Drata identified that AI-specific questions have surged by over 30%, clustering around five core themes: identifying running agents, their permissions, user identity, behavior verification, and proof of compliance.

Platform Capabilities

AI Agent Governance extends Drata's existing platform, used by over 8,500 organizations, into the governance of AI agents. Upon integration, inline sensors detect every agent created by employees, including shadow AI, and map them to their owner, identity, permissions, and scope. The system evaluates actions against individual policies in real time, blocking violations before execution and flagging any drift immediately.

Strategic Importance

The move responds to market trends showing that governance friction is a top barrier to AI deployment. "Answering those questions confidently is impossible with today's technology; anyone who solves that problem is solving for the future of enterprise trust," said Nils Puhlmann, co-founder of Cloud Security Alliance and former chief security officer of Twilio, Navan, and Zynga.

Adam Markowitz, CEO and co-founder of Drata, emphasized that the platform is uniquely positioned to provide this security layer. "Extending the platform to govern agents themselves is the next required step and Drata is uniquely positioned with the platform data and the policies, controls, risk, monitoring, and remediation actions to do it credibly," Markowitz said.

AI Agent Governance is currently in early access for customers across financial services, healthcare, and software sectors.