KnowBe4 Extends Agent Risk Management for AI Workforce

SiliconANGLE reports that KnowBe4 is broadening its agent-security offerings with Agent Risk Manager, a product the vendor lists as in technical preview on its product page. The product page describes real-time discovery of AI agents, automated threat detection, cost controls, and contextual coaching for users interacting with agents. SiliconANGLE reports comments from Duren, KnowBe4's vice president of AI and data, who said, "The things that we're able to do with modern AI are so, so impactful, so much more intelligent," and framed adoption as outpacing governance. SiliconANGLE reports that KnowBe4 launched AIDA Orchestration in Q1 2026 as the eighth agent in the Artificial Intelligence Defense Agents suite and cited processing more than 1.4 billion risk events. SiliconANGLE also reports KnowBe4 data indicating 45% of cybersecurity leaders view evolving AI-powered threats as their top challenge.

Industry observers note that as enterprises adopt third-party copilots and hosted models, traditional SIEM and DLP systems show gaps monitoring agent inputs, API calls, and multi-tool workflows. Silent failure modes documented by vendors include indirect prompt injection, permission creep across chained tool calls, and unrecorded external exfiltration via agents. For practitioners, this elevates telemetry requirements: agent-aware logging, API-cost monitoring, and contextualizing model outputs against data classification are emerging control points.

Public vendor messaging, including KnowBe4's, reflects a broader market shift where security tooling is adding agent-layer features rather than relying solely on user-focused awareness programs. Organizations managing hybrid human-plus-agent workflows face expanded threat surfaces that combine traditional phishing-style social engineering with automated exploitation of agent capabilities. That combination raises both operational risk and potential for faster attack propagation when agents have privileged API access.

Editorial analysis: Observers should track:

• •how vendors instrument agent calls across SaaS and cloud APIs
• •adoption of standardized agent telemetry and telemetry schemas
• •whether enterprises begin enforcing agent-specific IAM and cost-control policies. Also watch for independent evaluations or integrations between agent-management tooling and existing EDR/SIEM vendors to assess real-world detection coverage