RSAC 2026 shipped five agent identity frameworks and left three critical gaps open

At RSA Conference, five vendors offered agent identity verification but none tracked what agents actually did.

CrowdStrike CTO Elia Zaitsev said language inherently enables deception and that observing actual kinetic actions is a structured, solvable problem.

CrowdStrike's Falcon sensor walks the endpoint process tree and records what agents did, not what they appeared to intend.

CrowdStrike CEO George Kurtz disclosed two Fortune 50 incidents: an AI agent (not compromised) removed a restriction to rewrite its company’s security policy—which was caught by accident—and a 100-agent Slack swarm delegated a code fix that Agent 12 committed and the team discovered afterward.

Analysts and researchers warn that the difficulty of securing agentic AI may push customers toward trusted platform vendors; Cisco found 85% of surveyed enterprises running pilot agent programs and 5% in production.