F5 expands AI Security Platform with F5 Workforce AI Security
F5, the global leader in
delivering and securing every app and API, has announced the upcoming
availability of F5 Workforce AI Security, a new agentless offering within the
F5 AI Security Platform that gives organisations visibility and policy control
across workforce AI activity, including employee AI use and actions taken by
agents on users’ behalf.
Employees’ use of AI inside enterprises has moved beyond basic
prompts and queries. AI assistants and coding agents can now access enterprise
systems, call tools, manipulate data, and take actions using permissions
granted by their users. According to F5’s 2026 State of Application
Strategy Report, 66 per cent of
organisations already permit AI to automatically adjust policies and
configurations. As employees delegate more work to AI, agents can also gain
access to enterprise data, permissions, and systems. In effect, AI can act with
borrowed authority. For security teams, that means governing not only which AI
services employees use and what data they share but what AI is permitted to do
on their behalf.
“Employees aren’t just asking AI questions anymore. They’re
handing work to AI agents that can reach into enterprise systems, call tools,
and change data on their behalf,” said Kunal Anand, Chief Product Officer at
F5. “Workforce AI Security applies intent-based guardrails in the network path
to understand the context of AI interactions and enforce policy before risky
actions occur. With this addition, the F5 AI Security Platform gives
organisations one set of controls across how their workforce uses AI and how
they build and deploy AI, wherever it runs.”
Control across workforce AI
and agent activity
F5 Workforce AI Security is designed to provide visibility and
policy enforcement across workforce AI activity, from employees accessing AI
services to agents taking actions on their behalf. Upon availability,
capabilities are expected to include:
· Govern
workforce AI use. Discover AI services in use across
browsers and developer tools, and apply controls by service, license tier, file
upload, and data policy.
· Understand
identity and intent. Attribute AI interactions to users
and agents, and capture context including intent, risk, and policy decisions to
support enforcement and auditability.
· Control
agent actions before execution. Inspect and classify tool
calls across MCP servers and supported agent tools, applying policy to allow,
block, or modify actions based on identity, access risk, and sensitive data
exposure before they run.
· Enforce
policy in the interaction path. Apply network-based
controls across browsers, CLIs, coding agents, MCP clients, and agent
harnesses, including self-built tools accessing public model APIs, without
requiring another endpoint client and with seamless integration into existing
SASE environments.






























Leave A Comment