Varonis Shipped Intent-Based Access Control, Judging Agents on What They Do Rather Than What They Can Reach

GlobeNewswire via The Manila Times (corroborated by SecurityWeek)·medium signalXBlueskyLinkedInCopy link

Varonis announced Agent Intent-Based Access Control in its Atlas platform on August 3, comparing an agent's reasoning, tool calls and data access against its originally assigned task with adjustable sensitivity, and flagging or blocking anything outside that scope. Crucially it evaluates entire sessions rather than individual requests, specifically to catch gradual multi-turn jailbreaks, and can quarantine the offending identity for a set period or route the action to a human. The framing is a direct shot at RBAC: role-based access was never built to judge what a non-human identity does with access it legitimately holds.