Topic starter
10/07/2026 9:18 pm
TL;DR: Gartner research shows identity is becoming the primary control plane for zero trust as AI agents spread across workloads, while static IP-based microsegmentation leaves organisations exposed to AI-driven attacks, according to Zero Networks. The security shift is toward identity- and context-aware controls that can shrink blast radius before human response begins.
Editorial analysis by NHI Mgmt Group, based on content published by Zero Networks: “Gartner® Reimagining Network Microsegmentation: Beyond the IP — Identity, Context, and Agentless Innovation”.
Key questions
Q: Where does IP-based microsegmentation fail in practice?
A: It fails when network location is treated as the trust boundary for actors whose identities, sessions, and permissions change faster than the subnet model.
Q: Why do autonomous agents create more lateral movement risk?
A: Autonomous agents often need broad, chained access across APIs, data stores, and external services, so a compromised identity can move through multiple systems quickly.
Q: What do security teams get wrong about segmentation in Zero Trust?
A: They often treat segmentation as a network design exercise instead of an identity and governance control.
Practitioner guidance
- Map segmentation policy to identity-bearing assets Inventory workloads, service accounts, agent identities, and privileged paths, then attach segmentation logic to those identities rather than to static subnet assumptions.
- Define task-scoped boundaries for AI agents Limit which systems an agent can reach during a specific workflow, and revoke path access automatically when the task closes or the session changes context.
- Use blast-radius controls as a design objective Treat segmentation as a containment layer that should reduce lateral movement opportunity even when an attacker or compromised agent has internal access.
Bottom line: Identity-driven microsegmentation is replacing address-based trust because workloads, service accounts, and AI agents no longer stay aligned to static network boundaries.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
10/07/2026 9:41 pm
Identity-driven microsegmentation is becoming a governance problem, not just a network design problem. Once AI agents and machine identities are active participants in production, the control surface is no longer just routes and subnets. Policy has to answer which identity is allowed to create which communication path, under what context, and with what lifetime. That makes segmentation a core IAM and NHI governance issue, not a niche network optimisation exercise.
A few things that frame the scale:
- 90% of IT leaders say properly managing NHIs is essential for a successful zero-trust implementation, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: How should security teams implement zero trust for workloads and AI agents?
A: Start by giving each workload or agent a verifiable runtime identity, then enforce request-level policy and issue short-lived credentials only after the identity and context checks pass. The practical goal is to remove standing secrets and make access decisions at the point of use, not at deployment time.
👉 Read our full editorial: Identity-driven microsegmentation is overtaking IP-based zero trust