{"id":748053,"date":"2026-09-25T08:30:32","date_gmt":"2026-09-25T05:30:32","guid":{"rendered":"https:\/\/buradabiliyorum.com\/en\/the-next-thing-your-endpoint-manager-manages-is-an-ai-agent\/"},"modified":"2026-09-25T08:30:32","modified_gmt":"2026-09-25T05:30:32","slug":"the-next-thing-your-endpoint-manager-manages-is-an-ai-agent","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/the-next-thing-your-endpoint-manager-manages-is-an-ai-agent\/","title":{"rendered":"The next thing your endpoint manager manages is an AI agent"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6aefe094d5f3d\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6aefe094d5f3d\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/the-next-thing-your-endpoint-manager-manages-is-an-ai-agent\/#The_Inventory_Question_Just_Changed_Shape\" >The Inventory Question Just Changed Shape<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/the-next-thing-your-endpoint-manager-manages-is-an-ai-agent\/#Agents_Inherit_Privilege_They_Do_Not_Request_It\" >Agents Inherit Privilege, They Do Not Request It<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/the-next-thing-your-endpoint-manager-manages-is-an-ai-agent\/#Ungoverned_by_Default\" >Ungoverned by Default<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/buradabiliyorum.com\/en\/the-next-thing-your-endpoint-manager-manages-is-an-ai-agent\/#Scope_Then_Trust\" >Scope, Then Trust<\/a><\/li><\/ul><\/nav><\/div>\n<div id=\"article-main-content\">\n<p>Gartner forecasts that task-specific AI agents will be <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.gartner.com\/en\/newsroom\/press-releases\/2025-08-26-gartner-predicts-40-percent-of-enterprise-apps-will-feature-task-specific-ai-agents-by-2026-up-from-less-than-5-percent-in-2025\" target=\"_blank\" rel=\"nofollow noopener\">integrated into 40% of enterprise applications<\/a> by the end of the year. That\u2019s up from less than 5%.<\/p>\n<p>The systems meant to catalog what runs on a managed device haven\u2019t kept pace. 46% of organizations automate endpoint inventorying and monitoring today, per <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/go.automox.com\/state-of-endpoint-management-2026\" target=\"_blank\" rel=\"nofollow noopener\">Automox\u2019s survey of IT professionals<\/a>. That goes beyond a software inventory problem in the traditional sense. It\u2019s the point at which software stopped waiting to be told what to do.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_Inventory_Question_Just_Changed_Shape\"><\/span>The Inventory Question Just Changed Shape<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Software inventory answers a static question. For most of the discipline\u2019s history that was enough. Software on an endpoint did nothing until a person or a scheduler told it to. Resident agents break that premise. They read local files, call tools, invoke APIs, and take multi-step action in the gaps between the moments anyone\u2019s looking.<\/p>\n<p>So the useful question shifts to not what\u2019s installed, but what it\u2019s allowed to do and what it did. Cyberhaven Labs found enterprise adoption of endpoint-based AI-native <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>s <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.cyberhaven.com\/blog\/endpoint-ai-agents-blind-spot\" target=\"_blank\" rel=\"nofollow noopener\">grew 509% over the past year<\/a>. BeyondTrust\u2019s Phantom Labs put the rise in AI agents inside enterprise environments at 466.7% YoY. Both figures are vendor telemetry rather than industry-wide measurement, but they point the same way.<\/p>\n<blockquote>\n<p>\u201cNobody gets everything right. But there\u2019s a difference between being wrong and being wrong everywhere at once,\u201d says Automox CEO Justin Talerico. \u201cOne bad call on one machine, you fix it and move on. That same call pushed across the fleet, suddenly you\u2019re not fixing a mistake, you\u2019re managing a crisis. Speed without scale is a learning curve. Speed at scale is a bet on your own judgment, every time. That\u2019s the part people don\u2019t consider until it\u2019s too late.\u201d<\/p>\n<\/blockquote>\n<figure class=\"post-image post-mediaBleed aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-1616043\" src=\"https:\/\/media.thenextweb.com\/2026\/09\/Picture1.avif\" alt=\"Automox survey figures: 43% of teams spend 10+ hours a week on manual endpoint tasks, 51% take 5+ days to patch, only 6% fully automated, only 36% confident in compliance visibility\" width=\"245\" height=\"488\"\/><figcaption>Automox, State of Endpoint Management 2026 \u2014 <span class=\"post-image-credit\">Credit: <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/go.automox.com\/state-of-endpoint-management-2026\/\" target=\"_blank\" rel=\"noopener\">Automox<\/a><\/span><\/figcaption><\/figure>\n<p>The property that makes an agent useful, acting without waiting, is what turns an ungoverned one into a fleet-wide event.<\/p>\n<p>Those events land on the endpoint team by definition. Most of those teams lack a clear view of their own estate. Only 36% told Automox they were very or extremely confident in their endpoint compliance visibility.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Agents_Inherit_Privilege_They_Do_Not_Request_It\"><\/span>Agents Inherit Privilege, They Do Not Request It<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>An AI agent has no privileges of its own. It runs with the identity and permission scope of whatever launched it. That is BeyondTrust\u2019s point on agent identity governance. The operating system can\u2019t tell a command a person typed from one a model generated. None of that requires an exploit; it\u2019s the design working as intended.<\/p>\n<p>Revocation is the verb missing from most agent conversations. Inventory confirms an agent exists and scoping decides what it may do. What a fleet tool is uniquely placed to answer is what happens in the ninety seconds after someone decides it should stop.<\/p>\n<p>The OWASP Top 10 for LLM Applications <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/genai.owasp.org\/resource\/owasp-top-10-for-llm-applications-2025\/\" target=\"_blank\" rel=\"nofollow noopener\">files this failure mode under Excessive Agency<\/a>. It traces it to excessive functionality, excessive permissions, and excessive autonomy. Two of those three are permission problems. Its mitigations read like endpoint policy. Minimize what an agent can reach, execute in the user\u2019s context, require approval for high-impact actions.<\/p>\n<p>Most organizations aren\u2019t doing it. IBM\u2019s Cost of a Data Breach Report 2026 found that <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.ibm.com\/reports\/data-breach\" target=\"_blank\" rel=\"nofollow noopener\">92% of organizations reporting an AI-related breach<\/a> lacked proper AI access controls. Only 40% apply access controls to AI models and data at all. Teleport\u2019s 2026 Infrastructure Identity Survey measured the cost at a 17% incident rate for least-privileged AI access against 76% for over-privileged systems.<\/p>\n<figure class=\"post-image post-mediaBleed aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-1616044\" src=\"https:\/\/media.thenextweb.com\/2026\/09\/ibm-cost-of-data-breach-2026-ai-security-incidents.avif\" alt=\"Donut chart: 21% of organisations had a security incident involving an AI model or application, 73% did not, 6% unsure\" width=\"351\" height=\"488\"\/><figcaption>IBM, Cost of a Data Breach Report 2026 \u2014 <span class=\"post-image-credit\">Credit: <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.ibm.com\/reports\/data-breach\" target=\"_blank\" rel=\"noopener\">IBM<\/a><\/span><\/figcaption><\/figure>\n<p>The controls that make an agent safe to run already make any automated change safe. Automox\u2019s agent-facing Model Context Protocol integration ships with a read-only mode that disables every write operation through a single setting, tool access scoped by role, and correlation IDs written to an audit log on every invocation. That isn\u2019t a new category of control, it\u2019s endpoint governance applied to a caller that reasons.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Ungoverned_by_Default\"><\/span>Ungoverned by Default<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Every governance framework here assumes a known population of agents. The population isn\u2019t known. Verizon\u2019s 2026 Data Breach Investigations Report found <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/\" target=\"_blank\" rel=\"nofollow noopener\">67% of users reaching AI services<\/a> from non-corporate accounts on corporate devices. 45% of employees now qualify as regular AI users on those devices, up from 15% a year earlier.<\/p>\n<figure class=\"post-image post-mediaBleed aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-1616045\" src=\"https:\/\/media.thenextweb.com\/2026\/09\/verizon-dbir-2026-data-types-generative-ai-dlp.avif\" alt=\"Bar chart of data types in untrusted DLP events targeting generative AI tools: source code 28%, images 16%, structured data 14%, documents 13%, PDFs 10%, research documents 3.2%\" width=\"710\" height=\"488\"\/><figcaption>Verizon, 2026 Data Breach Investigations Report \u2014 <span class=\"post-image-credit\">Credit: <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/\" target=\"_blank\" rel=\"noopener\">Verizon<\/a><\/span><\/figcaption><\/figure>\n<p>Shadow AI is now the third most common non-malicious insider action in Verizon\u2019s data loss prevention dataset, a fourfold increase in percentage terms. The data type most often handed to unauthorized models is source code. IBM\u2019s numbers run parallel: shadow AI incidents more than doubled to 43% from 20%, and 68% of breached organizations had no policy for managing or detecting it.<\/p>\n<p>Blocking named tools doesn\u2019t work when the category grows faster than the blocklist. Endpoint teams reached that conclusion about unsanctioned software a decade ago, and the answer was inventory, policy, and the ability to remove.<\/p>\n<p>The resistance isn\u2019t about value. Asked what holds them back from autonomous endpoint management, 46% of the IT professionals in Automox\u2019s survey named data privacy and security implications, 44% the risk of incorrect or unauthorized changes, and 36% limited trust in AI-driven recommendations. What they want first is brakes: automatic rollback, named by 43%, and the ability to pause or override, named by 42%.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Scope_Then_Trust\"><\/span>Scope, Then Trust<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The argument over whether AI agents belong under endpoint management has been settled by where they run. What\u2019s left is an ownership question before it\u2019s a technical one: which team holds agent inventory, who sets the permission scope, and how fast access can be withdrawn when that scope turns out to be wrong.<\/p>\n<\/p><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMN63nwsw68G3Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/buradabiliyorum.com\/en\/category\/technology\/\" target=\"_blank\" >Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/thenextweb.com\/news\/endpoint-management-ai-agents-automox\" target=\"_blank\" >Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gartner forecasts that task-specific AI agents will be integrated into 40% of enterprise applications by the end of the year. That\u2019s up from less than 5%. The systems meant to catalog what runs on a managed device haven\u2019t kept pace. 46% of organizations automate endpoint inventorying and monitoring today, per Automox\u2019s survey of IT professionals&#8230;.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-748053","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/748053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=748053"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/748053\/revisions"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=748053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=748053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=748053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}