Ido Shlomo, co-founder and CTO of Token Security, makes a blunt case: an AI agent is not a person. It is a workload that impersonates one, chasing whatever goal it is handed without judgment, memory, or common sense. Treat it like an employee and hand it the keys, and enterprise security quietly starts to break down. 

Shlomo explains why agents inherit the same credentials and keys that service accounts have always used, why over-permissioning backfires on the business itself, and how identity teams can align an agent's access to its real intent. He also argues, against his own instincts, for more regulation of how agents connect to business systems and makes the case that reducing the blast radius matters more than trusting any single model.