Call a Specialist Today! (02) 9388 1741

AI’s identity crisis ends here

RSA Agent ID extends the identity standard trusted by government, finance and high-assurance organizations to every agent operating inside your business.

Sovereign control

Sovereign control

Run Agent ID in the cloud, hybrid, or on-premises, chosen per gateway.

Know every agent

Know every agent

Discover sanctioned and shadow agents and MCP servers.

Control every action

Control every action

Enforce your policy on each call at the AI/MCP Gateway.

Accountable to a human

Answerable to humans

Every high-risk action ends with a verified human decision.

Every Identity. Secured.

RSA Agent ID extends the RSA Unified Identity Platform to AI agents.

Agentic security will be won or lost on identity

150,000

AI agents projected for Fortune 500 enterprises by 2028, up from fewer than 15 in 2025

74%

of IT leaders say AI agents create new attack vectors

13%

of organisations believe they have adequate AI agent governance

Make autonomy answer to you.

Keep enforcement close, human authority clear, and every governed action on the record.

Discover

01

What agents are operating in your environment?

Find agents and MCP servers, sanctioned and shadow, across supported identity, cloud, endpoint and Gateway:


  • A named owner from the day each agent is found
  • A classification, risk tier and lifecycle state
  • Correlation to the identity provider you already run

Secure

02

Who is accountable for each?

Apply policy to each call routed through the AI/MCP Gateway:


  • Control access at the tool and argument level
  • Make sure delegated authority can only narrow
  • Require a named, authenticated human to approve actions you mark high-risk
  • Revoke access when an agent is decommissioned

Govern

03

Can anyone stop them?

Minimise privilege, certify access, and deliver evidence for ten industry frameworks.


  • Continuous certification
  • Risk-based access reviews
  • Lifecycle automation
RSA Agent ID availability

Availability

RSA Agent ID Discover and Secure ship November 16, 2026. Govern ships early 2027.

Discover and Secure establish the governance foundation at launch: classification, risk tiering, mandatory ownership, lifecycle states and evidence mapping. Continuous certification, risk-based access reviews and lifecycle automation arrive with Govern.

Sovereign control for security-first organisations

Sovereignty stays with you

Put the RSA Agent ID Gateway where your requirements demand. Host it in your environment and keep its decisions, keys and evidence on your side. Choose the region for tenant data. Go fully air-gapped and self-managed in 2027.

Humans hold the line

Every agent starts with an owner. Every high-risk action ends with a verified human decision. RSA Agent ID preserves the chain of command from authorisation to action.

Provable human authority over AI agents
Regulatory evidence for every governed agent action

Regulators, ask away

Every governed action builds the record for you. RSA Agent ID captures the agent, the rule, the human, the tool, and the delegation chain. Then it maps that evidence to ten major frameworks and sends it to your SIEM. So you can meet every examiner with evidence, not explanations.

Build on your identity provider. Not around it.

Keep the provider. Make agent authority enforceable. RSA Agent ID works with RSA ID Plus, Microsoft Entra, AWS IAM, Microsoft Defender, and more, and uses the credentials they already use. Your provider establishes authority. Agent ID makes sure agents stay within it.

RSA Agent ID with Microsoft Entra ID

Frequently Asked Questions

RSA Agent ID is an agentic AI security platform for government, financial services, and other highly-regulated organisations. It discovers AI agents and MCP servers, assigns each one an accountable human owner, enforces policy on every call through an AI/MCP Gateway you can deploy inside your own boundary, and records audit evidence of every agent action.
Discover and Secure ship November 16, 2026. Govern ships early 2027.
RSA Agent ID Discover correlates multiple discovery signals to find sanctioned and unsanctioned agents and MCP servers. It registers each one with a named owner, risk tier, and lifecycle state tied to your identity provider. IBM's 2026 Cost of a Data Breach Report puts the average shadow AI incident at $5.39 million.
Discover and Secure establish the governance foundation at launch: classification, risk tiering, mandatory ownership, lifecycle states and evidence mapping. Continuous certification, risk-based access reviews and lifecycle automation arrive with Govern in early 2027.
No. RSA Agent ID integrates with RSA ID Plus, Microsoft Entra ID, Okta, AWS IAM, CrowdStrike, Microsoft Defender, and more today, with additional agent platform integrations planned.
The Model Context Protocol (MCP) is an open standard that lets AI agents call external tools and data sources. An MCP gateway sits between agents and those tools and checks each call against policy before it runs. RSA Agent ID Secure runs this gateway RSA-hosted or in your private cloud, on-premises, or air-gapped environment.
Gateways can be RSA-hosted or customer-hosted in cloud, hybrid or on-premises environments. A fully air-gapped, self-managed version is coming in 2027.
Tenant data stays in the region you select: United States or EMEA. Enforcement evidence is generated where the Gateway runs.
You determine which actions are high-risk. Those actions wait for approval from a named person, verified against your identity provider and approved with a phishing-resistant credential.
RSA Agent ID maps evidence to ten frameworks: NIST AI RMF 1.0, ISO/IEC 42001, Treasury Financial Services AI RMF, NYDFS Part 500, DORA, NIST SP 800-53 Rev. 5, OMB M-25-21 and M-25-22, FedRAMP, EU AI Act, and OWASP Agentic AI Top 10.

Skip the promises. See the proof.

Get a firsthand look at RSA Agent ID and see what happens when agents answer to a higher standard.