SOC Analyst

BeyondTrust showcases the first wave of native Pathfinder capabilities for every identity at Black Hat USA 2026. * Marks a major milestone in the evolution of the BeyondTrust Pathfinder platform as it advances BeyondTrust's vision for redefining privilege management * Further extends BeyondTrust's privilege-centric approach to secure every human, machine, workload, and AI identity that can hold or exercise privileged access * Combines visibility, intelligence, and protection to reduce the standing privilege attackers depend on * Brings together four native Pathfinder capabilities: PathfinderAI & MCP Server, AI Agent Security, NHI Governance, and the newly announced Workload Credentials capability BeyondTrust, the global leader in privilege-centric identity security protecting Paths to Privilege(TM), today announced its Black Hat USA 2026 showcase of the first wave of native capabilities built on the BeyondTrust Pathfinder platform, extending the identity visibility and intelligence already delivered through Identity Security Insights(R), while adding new context and telemetry that make those insights even more powerful. Together, these capabilities further extend privilege management beyond traditional human administrators to every identity that can hold or exercise privileged access, advancing BeyondTrust's vision for redefining privilege management. PathfinderAI & MCP Server, AI Agent Security, NHI Governance, and Workload Credentials are the first native Pathfinder capabilities designed to help organisations discover, prioritise, govern, and protect privileged access wherever it exists. Together, these capabilities bring human and non-human identities, including AI agents and workloads, onto a single platform that combines identity visibility, intelligence, and protection to help organisations uncover, understand, and reduce the standing privilege attackers depend on. "We are not a privileged access company adding AI," said Marc Maiffret, Chief Technology Officer, BeyondTrust. "We are the company that has long defined how to secure privileged action. For twenty years, that meant people with administrative rights, and we built the category for securing them. Today, that actor is just as likely to be an AI agent or autonomous workload. The actor has changed. Our job has not." The Problem: Privilege Now Lives Everywhere Recent research from BeyondTrust Phantom Labs(R) found enterprise AI agents grew more than 460% year over year, while security researchers continue to document the rapid expansion of machine and non-human identities across enterprise environments. These identities often have no clearly assigned owner. Their access evolves faster than organisations can review it, and credentials intended to be temporary often persist indefinitely. Attackers have taken notice. They're increasingly abusing trusted identity relationships, from OAuth integrations to workload credentials, to move laterally and access sensitive data without triggering traditional security controls. Excessive privilege has become one of the easiest paths into modern environments. The Response: The Next Evolution of the Pathfinder Platform The following native capabilities expand the Pathfinder platform with new ways to discover, prioritize, govern, and protect privileged access across every identity. * PathfinderAI & MCP Server: PathfinderAI lets security analysts investigate identity risk using natural-language queries across identity relationships, privileges, and hidden Paths to Privilege(TM), natively inside the Pathfinder platform. A new Pathfinder MCP Server extends that intelligence outward, letting AI agents, such as Microsoft Copilot, OpenAI, and Claude, securely connect to BeyondTrust's privilege-centric identity intelligence through the open Model Context Protocol. * AI Agent Security: AI Agent Security enforces what AI coworkers and autonomous agents, including Claude Code, Microsoft Copilot, Cursor, and OpenAI Codex, are allowed to do on the endpoint, in real time, before they act. It helps organisations discover, inventory, and govern AI agents on endpoints across the enterprise, providing visibility into AI identities, shadow AI, associated privileges, and paths to privilege separate from the human identities. The solution enables security teams to understand where AI agents exist, what they can access, and how to reduce unnecessary privilege before it becomes exploitable. * NHI Governance: NHI Governance extends privileged access management to the service accounts, API keys, OAuth clients, workload identities, and AI agents that now outnumber employees in nearly every organisation - and remain largely ungoverned. It moves organisations beyond simply discovering non-human identities to actively governing the privilege they hold. Organisations can establish ownership, review privileged access, automate lifecycle management, and apply governance controls to identities that have traditionally operated outside standard identity governance processes. * Workload Credentials: Workload Credentials is a new cloud-native secrets management capability on the Pathfinder platform, purpose-built to secure the non-human identities behind CI/CD pipelines, Kubernetes services, containers, and AI agents. Rather than vaulting and rotating static secrets, Workload Credentials replaces them with short-lived, auto-expiring credentials that are generated on demand and discarded after use, so there is nothing left to leak. A workload authenticates with an OIDC identity token, a policy engine evaluates the request, a scoped credential is issued, and it expires automatically - no manual rotation required. Availability & Early Access PathfinderAI, the Pathfinder MCP Server, AI Agent Security, and NHI Governance are available now through the BeyondTrust Early Access program. Workload Credentials early access opens soon. Organisations can request access at the links below, contact their BeyondTrust account teams, or stop by booth #4720 at BlackHat to learn more.

BeyondTrust has unveiled the first native capabilities of its Pathfinder platform at Black Hat USA 2026. The platform extends privilege management beyond traditional human administrators to all identities capable of exercising privileged access, including AI agents and workloads. The initial wave includes PathfinderAI & MCP Server, AI Agent Security, NHI Governance, and Workload Credentials. These tools help organisations discover, prioritise, govern, and protect privileged access across human and non-human identities. Research from BeyondTrust Phantom Labs found enterprise AI agents grew more than 460% year over year. The company noted that attackers increasingly abuse trusted identity relationships to move laterally and access sensitive data. "We are the company that has long defined how to secure privileged action," said Marc Maiffret, chief technology officer at BeyondTrust.

BeyondTrust Introduces NHI Governance for AI and Non-Human Identities. On: July 22, 2026 BeyondTrust has announced NHI Governance, a new solution on the BeyondTrust Pathfinder platform that governs non-human identities operating across cloud, SaaS, endpoints, and on-premises environments. As service accounts, API keys, OAuth clients, workload identities, and AI agents continue to proliferate across enterprise environments, NHI Governance extends the privileged access discipline BeyondTrust has applied to human access for more than two decades to the identities that now outnumber employees in nearly every organization and remain largely ungoverned. The Problem: The Privileged Surface Changed. Controls Didn't Keep Up. Service accounts, API keys, OAuth clients, workload identities, and AI agents now hold most of the standing privilege in the enterprise, and they outnumber the people. BeyondTrust Phantom Labs research found that non-human identities already vastly outnumber human ones, with enterprise AI agents growing more than 460% year over year. Almost none are ever assigned an owner; their privileges are rarely reviewed, attested, or rightsized; and their credentials are seldom rotated or retired. They are granted access on the day they are created and often retain that access indefinitely. The industry's response has been to inventory them. But a longer list is not a control. The risk was never just that an identity exists; it is also, and especially, the privilege that identity holds and everything that privilege can reach. The recent wave of SaaS-to-SaaS software supply chain attacks made that abundantly clear. Attackers increasingly compromise the OAuth tokens trusted between applications, allowing legitimate access to data at scale. No malware, no escalation, no human in the loop. Every action reads as authorized because it was. Discovery and visibility alone do not stop an attack. Stopping the exfiltration requires controls to be executed ahead of the incident: access already scoped down, the token already rotated, or the unused identity already retired before the attacker arrived. "Seeing non-human identities was only half the equation," said Marc Maiffret, Chief Technology Officer, BeyondTrust. "The other half is doing something about the privilege they carry at scale: deciding who owns each one, pulling back the privilege they aren't using, and retiring the ones that should not exist. And doing so without requiring teams to address them one by one with the limited time they have. That's not paperwork you bolt onto a tool built for employee onboarding. That's managing non-human identities at machine scale." Helping Customers Move from an Inventory List to Real Control NHI Governance is built to execute the non-human equivalent of joiner, mover, leaver actions that actually reduce risk, in the right order: * Establish ownership. Every non-human identity is assigned to a person or a team who is accountable for it, so nothing runs unowned. * Enforce least privilege. Lock down the identities that hold real privilege, and constrain what each one can reach, closing the paths to privilege it was never meant to have. * Decommission NHIs. Retire the stale, orphaned, and abandoned identities that make up most of the ungoverned population, so the attack surface shrinks instead of growing unchecked. * Secure AI Agents. Bring them under the same controls, with their own credentials and their own access. Built on Two Decades of Privilege Enforcement For more than two decades, BeyondTrust has helped organizations reduce identity-based risk by governing privileged access across their most critical systems. Non-human identities are no exception. Identity Security Insights already provides industry-leading visibility and intelligence across non-human identities and the privileges they hold, while BeyondTrust Password Safe secures, manages, and rotates the credentials behind them. NHI Governance builds on that foundation by turning visibility and credential management into lifecycle governance that establishes ownership, enforces least privilege, and reduces identity-based risk. Part of the BeyondTrust Pathfinder platform, NHI Governance builds on the recent introduction of AI Agent Security, further unifying discovery, governance, and enforcement within a single platform to secure privilege consistently across every identity capable of privileged action. 2026-07-22