IBM Introduces Identity and Control for AI Agents, Securing Frontier Intelligence for the Enterprise

• 27 Oct 2026
• TM Team
• 0 Comments

 At TechXchange 2026, IBM is announcing new capabilities to help developers, IT and security teams put AI agents to work across business systems with clear authority and accountability. IBM brings together agent discovery, verified identities, access controls and performance evaluation to help organizations understand who owns each agent, control what it can access, and trace its actions across existing applications and infrastructure.  

According to Gartner, by 2028 the average Fortune 500 enterprise will use over 150,000 AI agents. But only 13% of organizations believe that they have the right AI agent governance in place [1]. Persistent credentials, unclear ownership and disconnected controls make it harder to govern agents as they interact with other agents, invoke tools and act across teams, platforms and clouds. 

"The winners in enterprise AI are changing how their business runs, not simply adding more AI to it," said Dinesh Nirmal, Senior Vice President, IBM Software. "For agents to take on real work across the systems a company depends on, it requires an AI operating model – one that connects agents to the business's data, applications and infrastructure and runs them with the same discipline as its most critical systems. Build trust and control into that model, and agents stop being a technology and become a way of doing business."  

Today's announcements extend IBM's portfolio to deliver an AI operating model of four essential systems working together: agents, data, automation and hybrid infrastructure. This starts with the trust and control every agent needs – a verified identity, only the access it needs, and one place to discover, secure and evaluate agents regardless of where they were built. 

HashiCorp Vault manages the secrets and credentials that applications and services use to access business systems. It provides that control through centrally managed secrets, automated rotation for supported credentials, and dynamically generated credentials that expire or can be revoked. These capabilities help reduce the time exposed credentials remain usable and limit access to the permissions configured for each role. 

HashiCorp Vault already secures non-human identities for organizations including ABN AMRO, Adobe, athenahealth, BBVA, BlackRock, Canva, Duke Energy, Expedia, London Stock Exchange, Starbucks, Swiss Federal Railways and Target, across systems that process billions of dollars in transactions [2]. HashiCorp will now extend those capabilities to AI agents, issuing secured, short-lived credentials that limit each agent to what it needs.