Enterprise AI security: where governance gaps are opening up

TL;DR: Enterprise AI security now has to cover AI-built code, AI agents with system-level permissions, embedded AI services, and model-data governance as organisations scale adoption, according to Pluto Security. The real break point is that legacy governance assumes deterministic software and stable ownership, while AI introduces autonomous actions, prompt sprawl, and shifting behaviour that demand identity, monitoring, and policy architecture.

Editorial analysis by NHI Mgmt Group, based on content published by Pluto Security: “Enterprise AI Security”.

By the numbers:

• Pluto Security is out of stealth with $42 million in total funding.

Key questions

Q: How should security teams govern AI-enabled workflows that can act on their own?

A: Treat them as identity-governed execution paths, not just software features.

Q: Why do AI model changes create governance risk even when approvals are still current?

A: Because approval often attaches to a declared model, not to the live service that users actually hit.

Q: What are the signs that shadow AI agents are escaping discovery controls?

A: Common signs include identity traces without formal registration, endpoint-level activity from local agents or MCP servers, and broad permissions with no clear owner.

Practitioner guidance

• Build a central AI asset inventory Catalog AI-built applications, agents, model integrations, prompt repositories, and embedding stores so governance starts from known assets, not assumptions.
• Separate agent identities from human identities Assign dedicated service identities to each agent, scope their tokens tightly, and prevent inheritance of broad user credentials.
• Insert mandatory review gates for AI-generated code Require security review for generated logic, dependency scanning for generated artefacts, and secure baselines before deployment.

Bottom line: Enterprise AI governance now reaches beyond model review into code, prompts, agents, and embedded services.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →