Personal agents in vendor cloud: what security teams can and can’t see

TL;DR: Personal agents now run in vendor-controlled cloud environments using employee accounts, which leaves EDR blind to most activity and shifts security visibility to OAuth grants, mailbox forwarding, permissions and revocation gaps, according to Manifold Security. The control problem is no longer just endpoint monitoring; it is governing delegated access, retained data and unmanaged connectors.

Editorial analysis by NHI Mgmt Group, based on content published by Manifold Security: “Personal agents live in iMessage and WhatsApp. Your EDR doesn’t.”.

Key questions

Q: What breaks when personal agents run in vendor cloud instead of on endpoints?

A: Endpoint-based detection breaks down because the process, browser session and storage often sit in infrastructure the organisation does not control.

Q: Why do delegated OAuth grants make personal agents a security risk?

A: OAuth grants give an agent the same practical reach a user has in mail, storage and collaboration systems, but at machine speed and without the same human friction.

Q: What signs show that personal agents are exceeding intended access?

A: Look for unexpected forwarding to agent-owned domains, mailbox summaries appearing after revocation, unexplained connector expansion and actions that were not explicitly approved by the user.

Practitioner guidance

• Restrict third-party OAuth consent for agent use Limit Gmail, Outlook, Drive and Slack scopes to approved apps, and require explicit review for any personal agent that requests broad mailbox or file access.
• Audit managed Macs for agent-facing permissions Check screen recording, accessibility and other high-risk permissions on managed macOS devices where agent apps or companion components may operate locally.
• Monitor forwarding to agent-owned domains Detect mailbox forwarding, auto-copying and similar mail flow changes that move corporate content into agent-controlled storage or vendor-hosted mailboxes.

Bottom line: Personal agents change the security boundary by moving execution into vendor-controlled cloud environments that endpoint tools cannot fully see.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →