Agents have identities, permissions, and a blast radius.
Most organizations still govern them like features. I write about what changes when an agent is treated as a principal in your tenant instead of a checkbox in a product roadmap.
I'm a senior customer experience engineer at Microsoft Security. Everything here is my own view, grounded in what actually ships.
Recent writing
Agent 365 and the posture gap
Agent inventory tells you which agents exist. It doesn't tell you which ones can quietly reach your crown jewels.
What least privilege means when the principal isn't a person
Placeholder — swap in your second piece. Human least privilege assumes a human review cadence that agents outrun.
Get new writing by email
Notes on agent governance, identity, and cloud security posture. One email when something new goes up, and nothing else.
No tracking pixels. Unsubscribe from any email.