Cyberhaven Launches Agentic Data Security to Monitor and Control AI Agent Data Usage
Cyberhaven introduces Agentic Data Security (ADS) to provide visibility and control over how AI agents access and use sensitive company data, aiming to enable secure AI adoption.
Cyberhaven has launched Agentic Data Security (ADS), a new solution designed to empower CISOs, data security teams, insider risk teams, and AI governance leaders to confidently adopt AI agents without compromising data control.
ADS provides security teams with a comprehensive view of AI agent activities, detailing what data each agent accesses, who it acts on behalf of, and where that data subsequently flows. Crucially, the tool is engineered to intercept and prevent the exfiltration of sensitive data, thereby facilitating the secure integration of AI agents into organizational workflows.
AI agents are rapidly transforming business operations, but they also introduce a new category of insider risk. As these agents move from pilot programs to full production, a primary concern for security leaders across various industries is understanding their data interactions: what data is being accessed, and by whose command. AI agents operate with the permissions of the users they serve, at machine speed, enabling them to perform complex actions like reading files, querying databases, and sharing findings within a single workflow.
Research from Cyberhaven Labs indicates a significant trend: endpoint-based adoption of agentic AI applications has doubled year-over-year, reaching 60% by May 2026. This accelerated adoption rate presents novel data risks, particularly from agents that are considered "trusted" within the organization.
"AI agents now work with the access of a trusted employee," stated Nishant Doshi, Cyberhaven CEO. "The first agentic data incident at most companies may be an agent doing exactly what it was asked to do, with data it should never have touched. Most companies will adopt agents faster than they can build new controls for them. Agentic Data Security gives them the confidence to deploy agents while keeping control of the data itself, not just the tooling that touches it."
Agentic Data Security is the latest module integrated into Cyberhaven Flow, the company's unified data security platform. This platform leverages data lineage, AI, and autonomous protection to deliver Data Loss Prevention (DLP), Insider Risk Management (IRM), and Data Security Posture Management (DSPM) for both human users and AI agents. This release represents a strategic advancement of the company's July initiative, which unified data lineage, identity, and behavior analysis to protect data across all human and agentic workflows.
"One cannot govern AI-era risk without understanding what data was touched, by whom, through what workflow, and whether that movement was authorized," commented Lawrence Pingree, Head of Research at SACR. "Cyberhaven’s data lineage gives security teams that foundation for people and AI agents together, in one platform."
The Agentic Data Security solution offers four key controls for security teams: discovering all AI agents across endpoints, cloud, and browsers (including unsanctioned apps) and assessing their risk; capturing detailed agent actions like prompts and tool calls; linking each action to the responsible person or system; and preventing data exfiltration by applying existing human-centric policies to agentic actions.