Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-08-04 · high
The tool watches whole agent sessions instead of single requests, aiming to catch jailbreaks that build gradually across multiple turns.
Why now: Varonis announced the feature on August 3, positioning it as a direct challenge to RBAC's blind spot on non-human identities.
Varonis released Agent Intent-Based Access Control on August 3, per The Manila Times. For security teams running AI agents, it targets a specific hole. Role-based access control was never built to judge what a non-human identity does with access it already holds, per the report.
The system compares an agent's reasoning, tool calls and data access against its original task, then flags or blocks anything outside that scope. RBAC tells you what an agent can reach. It doesn't watch what the agent does once it's there, and that's the gap Varonis is aiming to close.
The scoring runs across whole sessions instead of single requests, built to catch jailbreaks that build gradually over many turns. Sensitivity is adjustable. When a session crosses the threshold, Varonis can quarantine the agent's identity or route the session to a human for review. The announcement doesn't say how many false positives to expect or who sets the sensitivity threshold on a given deployment.
Each link below shares sources, entities, or timing with this story.
Varonis criticizes MCP / Shared entity: RBAC / Shared topic / Earlier coverage
Linked by a graph relationship (Varonis criticizes MCP); both cover RBAC; overlapping topics (access, agent, control).
Linked by a graph relationship (Varonis criticizes MCP); both cover RBAC; overlapping topics (access, agent).
Varonis criticizes MCP / Shared topic / Tension
Linked by a graph relationship (Varonis criticizes MCP); overlapping topics (access, against, agent, data); pushes against this story (against).
Linked by a graph relationship (Varonis criticizes MCP); overlapping topics (access, against, agent, control); pushes against this story (against).
Linked by a graph relationship (Varonis criticizes MCP); overlapping topics (access, against, agent, call); pushes against this story (against).
Varonis released Atlas / Shared topic
Linked by a graph relationship (Varonis released Atlas); overlapping topics (against, agent).
Varonis criticizes MCP / Shared topic / Tension / Downstream implication
Linked by a graph relationship (Varonis criticizes MCP); overlapping topics (against, agent); pushes against this story (against).
Varonis criticizes MCP / Shared topic / Tension
Linked by a graph relationship (Varonis criticizes MCP); overlapping topics (against, agent, call); pushes against this story (against).