Identity security provider Silverfort has announced a new integration that brings advanced identity protection capabilities to AI agents built within Microsoft Copilot Studio. The integration enables real-time identity security enforcement, allowing organizations to apply intelligent access controls exactly when an AI agent attempts to perform an action. Unauthorized requests can be blocked before execution, helping prevent security incidents before they occur.

AI agents developed through Copilot Studio are capable of authenticating users, accessing enterprise data, initiating workflows, and interacting with systems across both cloud and on-premises environments. Since these activities are linked to human users with varying permission levels as well as multiple machine identities, they create complex authentication and authorization chains that can introduce security risks, including privilege escalation.

According to Microsoft, more than 80% of Fortune 500 organizations are actively deploying AI agents created using low-code or no-code development platforms. Additionally, nearly 29% of employees are already utilizing unsanctioned AI agents in their daily work. While business teams increasingly adopt AI solutions through platforms such as Copilot Studio, responsibility for managing associated security risks remains with identity and security leaders.

Ron Rasin, Chief Strategy Officer at Silverfort, emphasized that identity lies at the heart of AI security. He noted that AI agents become more capable as their access to enterprise resources expands, but without comprehensive identity intelligence, organizations cannot accurately determine whether an agent’s actions are legitimate or excessive. He added that Silverfort’s integration with Microsoft Copilot Studio highlights the importance of runtime identity enforcement as a critical requirement for secure AI deployment.

Real-Time Access Control at Runtime
Silverfort integrates directly with the Copilot Studio environment to provide access decisions in real time. Whenever an AI agent requests permission to use a tool, application, or function, Silverfort evaluates the request and issues an authorization decision before the action is carried out. This proactive approach helps organizations prevent unauthorized access, privilege misuse, and unintended actions before they impact business operations.

Key capabilities of Silverfort’s runtime enforcement include:

Ankur Arora, Principal Group Product Manager at Microsoft, stated that the integration extends security controls directly to the point of access. Rather than providing visibility after an action has occurred, the solution evaluates and governs every access request in real time before execution.

Unified Security Across Diverse AI Ecosystems
Most enterprises operate multiple AI platforms rather than relying on a single agent framework. As a result, organizations often manage AI agents built with Copilot Studio alongside internally developed and third-party solutions, creating fragmented security oversight.

Silverfort addresses this challenge by providing centralized visibility and identity-based controls across:

Advancing Enterprise AI Security
The Copilot Studio integration aligns with Silverfort’s broader vision of establishing identity as the primary security control layer for AI-driven enterprises. As a long-term Microsoft collaborator and former Microsoft Partner of the Year, the company continues to expand its capabilities for securing hybrid and cloud environments. Silverfort is also working closely with Microsoft on the development of additional AI-focused security innovations.

As organizations transition from AI experimentation to large-scale operational deployment, identity management is becoming the critical mechanism that governs what AI agents are permitted to do. Silverfort supports this shift by delivering identity-based enforcement at enterprise scale, processing more than 10 billion authentication events every day across over 1,000 organizations worldwide, including several Fortune 50 enterprises.

The company is also investing in AI security research, focusing on areas such as prompt injection detection and jailbreak prevention through recursive language modeling (RLM) and related technologies. By combining deep integration with Microsoft platforms, extensive identity telemetry, and ongoing AI security innovation, Silverfort aims to establish identity security as a cornerstone of the modern agentic enterprise.

Click here to know more.

Artificial intelligence (AI) introduces numerous ethical challenges that can translate into risks for consumers, businesses, and investors. The uneven development of AI regulations across different jurisdictions further heightens this uncertainty. Investors should prioritize transparency and explainability.
 
The ethical dilemmas and associated risks of AI originate with the developers who create the technology. These risks then extend to the companies that implement AI and eventually impact consumers and society at large. Investors, through their stakes in AI developers and companies utilizing AI, are exposed to these risks at both the development and implementation stages.
 
AI is advancing rapidly, outpacing the general public’s understanding. Regulators and lawmakers worldwide are trying to catch up. While it appears that regulatory activity has surged in recent years, with many countries releasing AI strategies and others nearing this stage, the progress is inconsistent and incomplete. There is no standardized approach to AI regulation, and some countries had regulations in place before the launch of ChatGPT in late 2022. As AI continues to proliferate, many regulators will need to update and possibly expand their frameworks.
 
For investors, the regulatory uncertainty adds another layer of risk to those inherent in AI. Understanding the AI business landscape, ethical concerns, and regulatory environment is crucial for managing these risks.
 
AI encompasses a range of technologies designed to perform tasks typically done by humans, often in a human-like manner. Generative AI, which includes creating content like video, voice, text, and music, and large language models (LLMs), focused on natural language processing, are prominent examples. Companies increasingly use LLMs for applications such as chatbots, automated content creation, and data analysis in customer engagement.
 
However, as many companies have discovered, AI innovations can pose risks to their brands. These risks stem from biases in the data used to train LLMs, leading to unintended consequences such as banks discriminating against minorities in home-loan approvals or a health insurance provider facing a lawsuit for allegedly wrongful denial of extended-care claims due to an AI algorithm.
 
Regulators target risks like bias and discrimination, but investors should also consider other issues such as intellectual property rights and data privacy. Measures to mitigate these risks include rigorous testing of AI models for performance, accuracy, and robustness, as well as ensuring transparency and support for companies implementing AI solutions.
 
Understanding AI Regulations: A Deeper Dive
The landscape of AI regulation is evolving differently across jurisdictions. Notable recent developments include the European Union's Artificial Intelligence Act, expected to be enacted by mid-2024, and the UK government's response to a consultation process following the release of its AI regulation white paper.
 
These initiatives highlight contrasting regulatory approaches. The UK favors a principles-based framework, allowing existing regulators to address AI issues within their domains. Conversely, the EU introduces a comprehensive legal framework with risk-graded compliance obligations for AI developers, companies, and importers and distributors.
 
Investors should not only examine the specifics of each jurisdiction's AI regulations but also understand how existing laws—such as copyright and employment laws—are being used to address AI-related issues.
 
Importance of Fundamental Analysis and Engagement
For investors assessing AI risk, a good indicator is whether companies make full disclosures about their AI strategies and policies, suggesting they are prepared for new regulations. Fundamental analysis and issuer engagement remain crucial.
 
Fundamental analysis should explore AI risk factors at the company level, along the business chain, and within the regulatory environment, aligning insights with core responsible-AI principles.
 
Engagement discussions should address AI's impact on business operations and consider environmental, social, and governance perspectives. Investors should ask boards and management:
 

 
To navigate the complexities of AI, investors should remain grounded and skeptical, demanding clear and straightforward answers rather than being swayed by elaborate explanations.