Eight Security Vendors Announce Agent Controls at Black Hat

Eight security vendors converged on the same three agent-governance mechanisms in one Black Hat announcement window, per SecurityWeek's vendor roundup.

For Arrakis, Hush and Bloom, the seed-stage startups selling agent governance as their whole product, that overlap is the threat. When eight competitors bundle the same defenses into tools their customers already own, governance stops being a reason to sign a new vendor. It becomes a line on the RFP instead.

Cyera, KnowBe4, Sweet Security, Varonis, Zero Networks, Cato Networks, Cribl and Prophet Security all announced agent-focused controls on August 3, according to the roundup. Acalvio and Cycode had shipped comparable controls in the days before that Monday. Nearly all ten center on the same three checks: prompt-injection detection, blocking unauthorized tool calls, and evaluating whole sessions instead of single requests.

The overlap goes deeper than shared theme. Ten separate engineering teams landed on the same design in one announcement cycle. The roundup doesn't say whether any of them have tested those checks against a live attack, only that they shipped.

Related coverage from the same research window covers competing AI safety open letters over model-level pledges. Governance arguments are running on two tracks: what labs promise upstream, and what security vendors enforce at runtime.