Topic starter
09/07/2026 10:03 am
TL;DR: CSA’s first Agentic AI Security Innovator Market Map places Knostic across Governance, Observability, and Supply Chain Integrity, signalling that agentic AI security is maturing into a control-surface problem rather than a point-solution market, according to Knostic. The real question for practitioners is whether their current controls can govern agent behaviour, visibility, and upstream supply inputs as one operating model.
Editorial analysis by NHI Mgmt Group, based on content published by Knostic: “Knostic Featured Across Three Categories in CSA's Agentic AI Security Innovator Market Map”.
Key questions
Q: How should security teams govern AI agents that can choose tools at runtime?
A: Security teams should govern runtime agent choice as an access event, not as a simple application action.
Q: Why does agent observability matter if teams already have logs?
A: Logs record events, but observability lets teams reconstruct intent, tool use, output, and side effects across a full agent task.
Q: What are the signs that agentic AI controls are too weak?
A: The warning signs are capability exposure and late-stage detection.
Practitioner guidance
- Define an agent governance policy layer Specify what agent classes may do, which tools they may call, and which actions require human approval or step-up controls.
- Instrument agent observability end to end Correlate prompts, tool calls, outputs, and downstream side effects so agent behaviour can be reviewed and investigated.
- Inventory agent supply inputs Track MCP servers, extensions, prompts, rules, and other upstream components that can change agent behaviour or expand scope.
Bottom line: Agentic AI security is converging on a control-surface model that combines governance, observability, and supply chain integrity around non-human actors.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
09/07/2026 10:04 am
Agentic AI security is becoming an identity governance problem, not just an AI safety problem. Once agents act in production, they inherit the same questions practitioners ask of any privileged non-human identity: what can it do, what can it reach, and how is that authority constrained. The CSA market map is notable because it groups governance, observability, and supply chain integrity into one operating surface. Practitioners should interpret that as a signal to govern agents like runtime actors, not like static applications.
A few things that frame the scale:
- 88% of organisations have embedded AI agents in their workflows, according to KPMG's 2026 report.
A question worth separating out:
Q: How do supply chain risks change when prompts, extensions, and MCP servers shape agent behaviour?
A: The risk shifts from model integrity alone to the trustworthiness of every upstream component that influences the agent. Compromised prompts, extensions, or MCP servers can steer behaviour without breaking the model itself. Teams should treat these inputs as part of the agent trust boundary and govern them with the same discipline used for privileged software dependencies.
👉 Read our full editorial: CSA market map spotlights agentic AI governance, observability, supply chain