Cyberhaven introduces Agentic Data Security for AI agents

Cyberhaven introduced Agentic Data Security, a product designed to help CISOs, data security teams, insider risk teams, and AI governance leaders allow AI agents to operate without losing control of company data. The product is available for purchase.

AI agents are changing how work gets done and introducing a new form of insider risk as they move from pilots into production. Because agents act with the access of the people they serve, at machine speed, a single agent can read a file, query a database, and share the results within one workflow. Cyberhaven Labs found that endpoint-based agentic AI app adoption doubled year over year, reaching 60% in May 2026.

Agentic Data Security is the latest module in Cyberhaven Flow, a unified data security platform that uses data lineage, AI, and autonomous protection to deliver data loss prevention, insider risk management, and data security posture management for humans and agents.

Security teams can locate AI tools and agents across endpoints, clouds, and browsers, including unsanctioned apps, and assign each a risk score. Captured prompts, tool calls, file reads, reasoning traces, and responses show the data involved in each step, with each action linked to the person or system behind it. Policies already used for people can extend to agent actions, identifying risky behavior and containing sensitive data before it leaves.

Nishant Doshi, Cyberhaven CEO, said, “AI agents now work with the access of a trusted employee.” Dan Walsh, CISO, Datavant, said, “The winners will say yes to AI without watching their data walk out the door, and that requires security that follows the data everywhere it goes.”

Lawrence Pingree, Head of Research, SACR, said, “One cannot govern AI-era risk without understanding what data was touched, by whom, through what workflow, and whether that movement was authorized.” Manish Kalia, Chief Product Officer at Cyberhaven, said, “Because agent tool calls and reasoning traces are content Cyberhaven can already inspect, the policies customers use to manage insider risk now apply to agents too.”