Okta Inc. introduced new runtime enforcement and kill switch capabilities for its Okta for AI Agents platform at the Oktane conference. The Agent Gateway will sit between agents and tools to enforce policies and log interactions in real time. The company also launched Shadow AI Agent Discovery for Endpoints to detect unmanaged agents on employee devices.

New features include Agent SSO, which replaces non-expiring keys with short-lived tokens, and Agent-to-Agent Connections to track interactions. Resource Access Certifications will monitor permissions over time, while Configuration Designer provides visual mapping of agent connections. Agent SSO and connection tools are available now, with other features launching later this year.

Okta joined 11 other vendors, including AWS, CrowdStrike, and Google Cloud, to form the Blueprint Alliance. This group is developing an open, multivendor reference architecture for agent security. The alliance aims to standardize how enterprises respond to compromised agents through token revocation, session termination, and network quarantine.

The alliance builds on research from Gartner Inc., which projects that Fortune 500 enterprises will use over 150 000 agents by 2028. Currently, only 13% of organizations report having adequate AI agent governance. Founding members of the alliance also include Databricks, Docker, Salesforce, ServiceNow, and Zscaler.