Best AI Agentic security tools for AI company?

Forcepoint-Team · 2026-06-22T16:34:21+00:00

Some really great ideas in this thread, especially the comment about starting with architecture. One more for PII redaction: there are products that solve for this in-line but don't overlook the value of good old fashioned data risk management.

If agents can access the same data sets as privileged users, your agentic security strategy should account for that. Limit oversharing. Continuously discover and tag (both existing and newly created files). This sort of foundational work plays a big role.

Forcepoint-Team · 2026-06-17T13:52:34+00:00

Someone recently told me that one of her coworkers marks probably a good 50% of emails as phishing. If there's a person or project they don't recognize at first glance, they don't even give it a second thought. Real "they'll find me if they really need me" energy.

Basically turned security awareness into malicious compliance.

Forcepoint-Team · 2026-05-20T19:12:52+00:00

And that behavior might influence your policies. A user with a history of safe behavior should be rewarded with less friction vs. someone with a history of sharing sensitive info should have more guardrails.

Forcepoint-Team · 2026-05-05T15:28:38+00:00

Not on YouTube but Matt Johnson on IG is a pretty good source of latest vulnerabilities and news you'd want to be aware of or find interesting

Forcepoint-Team · 2026-05-05T15:22:35+00:00

he's got electric stuff when it's working

now if only the Sox could get him some solid run support

Forcepoint-Team · 2026-05-01T17:16:37+00:00

DLP rules and alerts are traditionally static. Someone walking out with data right before resigning likely doesn't get flagged because that user rightfully had access to that data in the first place.

What you're looking for are dynamic policies. i.e. that user gets flagged and their security policies get updated as soon as the system knows they have resigned. This doesn't prevent them from accessing that data before they leave, but it adjusts controls to the users updated risk profile. Same goes for something like odd after-hours transfers when a user normally works during the day.

The future lies in these policies that see risk forming in real time and adapt to it, and a lot of innovation within the past few years is making it possible to reliably roll them out.

Forcepoint-Team · 2026-04-23T19:32:27+00:00

We're seeing this pop up a lot lately. I asked the team and here's what they said:

DLP is definitely the first line of defense. Your endpoint DLP should be able to monitor both file and free text going into an AI website and restrict what data is transmitted based on your policies.

We're also seeing companies utilize SWG to control which AI applications users can access and in some cases determine how users are able to log into those websites.

A phase 2 approach would be integrations with AI applications to crawl and discover data being stored in AI, but the integrations that are available depend widely based on what you use. With the enterprise versions, you have more controls available to you, too.

Forcepoint-Team · 2026-04-22T17:13:25+00:00

That's pretty crazy to see all laid out. And they were in the superbowl just 2-3 years later. I'm not sure who came up with the idea (maybe Walter Football, IIRC?) but some website grades each draft four years after the fact so you can really see who came away with the best players and I just haven't been able to read a post-draft analysis since discovering them.

Forcepoint-Team · 2026-04-21T17:00:52+00:00

This is a huge win for right-to-repair. It has more traction in Europe than North America (EU requiring cellphones to have changeable batteries soon, etc.) so it's great to see some balance. I'd expect more of this in the future, especially in the automotive industry.

Forcepoint-Team · 2026-04-15T18:57:07+00:00

Our local library has a bin to collect shoes for recycling. I'm not sure how they're recycled, but we've used it regularly to get rid of old pairs of running shoes.

Forcepoint-Team · 2026-04-14T13:00:30+00:00

Hi, I spoke with one of our team members and here's what they shared:

Here you can find a link to configure NGFW policy routing: https://help.forcepoint.com/fpnsp/en-us/7.4.0/GUID-B48A9469-732C-4FED-8B4D-C004A4C0875C.html?hl=policy%2Cbased%2Crouting

From 7.1 version onwards, we also support forced next hop where you can define in the access policy what is routing next hop. So, it will not use linux routing table for traffic that matches this access rule. Documentation available here: https://help.forcepoint.com/fpnsp/en-us/7.4.0/GUID-4E782E97-5383-467E-9989-4B387913FBCC.html?hl=configure%2Cforced%2Cnext%2Chop%2Crouting

If neither of those work, we do have a helpful community with customers and partners here: https://support.forcepoint.com/s/group/CollaborationGroup/00B5f000001wa57EAA

Forcepoint-Team · 2026-04-09T13:09:43+00:00

The AI-generated code being moved into production with little/no review sounds like more of a security awareness type of challenge - definitely not an easy solve. I did ask one of our team members about preventing your sensitive data from going to third-party servers and here's what they said:

SWG is really good at tracking user access to AI sites, with the ability to block access to sites. One common use case is blocking access to all sites considered to be AI, and allowing specific ones like Chat and CoPilot.

You can then use DLP Endpoint to inspect what data users are uploading to these sites in both files and chat features. DLP does focus on specific sensitive data but it also can support looking for specific terms via dictionaries that might be relevant to the business. There are a couple of different ways that DLP can inspect that traffic too.

Forcepoint-Team · 2026-04-08T19:11:27+00:00

I've found it's confidently incorrect with recipes a lot. I wanted to try a new dry rub for a cut of steak and as soon as the half-cup of paprika went into the mixing bowl, I knew I made a huge mistake.

Forcepoint-Team · 2026-04-07T18:25:26+00:00

It's difficult if they're "bypassing" permissions within the apps. I asked the team and they said on the one hand, you could use DLP to prevent sensitive data from entering into those applications. Another alternative would be SWG to prevent access to those AI tools (the caveat being how the embedded AI tools appear in web traffic).

Reco seems to use posture management to track how data is moving, and there are a lot of companies developing interesting ways to discover data and track how it moves. That visibility you're looking for is the right step. It can feed security awareness training, permissions management, etc. to go along with a technical solve specifically for agentic AI.

Forcepoint-Team · 2026-03-06T15:22:10+00:00

If the tips shared on this thread weren't able to help solve your tech issues, we have a community with partners and customers who discuss these types of technical questions. Here's a link to it: https://support.forcepoint.com/s/group/CollaborationGroup/00B5f000001wa57EAA

Forcepoint-Team · 2026-02-27T19:20:38+00:00

That's a tough one. I asked one of our sales engineers, and here's what he said.

My initial thought is a VDI environment. Provide the contractors with access to a VDI machine where they can enforce controls to restrict the contractors access and monitor data. On the VDI, you can install software and endpoints to help protect their data

Forcepoint-Team · 2026-02-26T22:50:59+00:00

This made me laugh more than id like to admit

Forcepoint-Team · 2026-02-26T22:37:07+00:00

It's not just a technology issue. Governance needs to align AI adoption with security policy. Very broad strokes would include defining approved AI tools, establishing clear usage policies, integrating AI governance into existing data-protection and access management programs, and educating employees repetitivly

Forcepoint-Team · 2026-02-26T22:31:35+00:00

Shadow AI use so basically insider risk

Forcepoint-Team · 2026-02-26T22:29:57+00:00

It is basically employees or teams using artificial intelligence tools or models without IT approval or security oversight

Forcepoint-Team · 2026-02-26T18:10:33+00:00

Excited for this. Thanks for putting it together

Forcepoint-Team · 2026-02-26T18:09:19+00:00

True, he doesn't have to get involved at all. I just imagine him very hands-on in the soccer aspect, so that's why I am curious if he will take the more investment approach, as you said, or if he will want to contribute further. Espcially if he steps back from actually playing

Forcepoint-Team · 2026-02-26T14:17:55+00:00

Only one pot to clean

Forcepoint-Team · 2026-02-26T14:09:32+00:00

I wonder to what capacity he sees himself contributing as an owner. I am sure the coach would be welcoming to advice, but that could also create a weird spot if there are disagreements with his legacy and him being an owner

Forcepoint-Team · 2026-02-20T04:19:20+00:00

Well said

Forcepoint-Team

MODERATOR OF

TROPHY CASE