{ "schema": "hangingcontext.desk/1", "type": "story", "id": "427", "slug": "securing-the-agent-fleet", "edition": "2026-10-22T12", "url": "https://hangingcontext.com/stories/2026-10-22/securing-the-agent-fleet/", "newsroom": "artificial-intelligence", "beat": "policy", "newsroom_title": "Artificial Intelligence", "angle": "Agent security is now its own product category — from endpoint suites to governance frameworks", "headline": "The agents are multiplying. Security vendors are selling the leash.", "dek": "SentinelOne launched agent detection and an autonomous SOC; NVIDIA pushed a governance reference architecture and confidential bare metal.", "published_at": "2026-10-22T12:44:22Z", "labels": { "trust": "reported", "trust_text": "Reported · 5 sources", "newsroom": "Artificial Intelligence" }, "source_count": 5, "publishers": [ "nvidia-blog", "sentinelone-press" ], "key_facts": [ { "text": "SentinelOne unveiled Singularity ADR at OneCon 2026, now in early access, to discover AI agents, enforce their permissions, and stop rogue behavior in real time.", "self_reported": true, "cites": [ { "manifest_id": "1792602905572654453", "claim_ids": [ "1792603131957998977", "1792603131960790843" ] } ] }, { "text": "SentinelOne says its Purple Agentic Investigation has completed more than 400,000 investigations of critical alerts and saved customers an estimated 332,000 analyst hours.", "self_reported": true, "cites": [ { "manifest_id": "1792602905572970653", "claim_ids": [ "1792603131232917121", "1792603131233109825" ] } ] }, { "text": "SentinelOne and Lenovo expanded their partnership to bring AI security and governance to the ThinkShield security portfolio.", "self_reported": true, "cites": [ { "manifest_id": "1792602905571086515", "claim_ids": [ "1792603129622567170" ] } ] }, { "text": "NVIDIA's OpenShell reference architecture is designed to give organizations full-stack control to deploy AI agents with clear boundaries on what agents can access and do, per NVIDIA.", "self_reported": true, "cites": [ { "manifest_id": "1792604918816335725", "claim_ids": [ "1792605250183776884" ] } ] }, { "text": "NVIDIA introduced Confidential Bare Metal; Cohere plans to integrate it into its Model Vault, and Google Cloud is extending support to A4X Max instances on GB300 NVL72 systems.", "self_reported": true, "cites": [ { "manifest_id": "1792604918816187242", "claim_ids": [ "1792605264075670034", "1792605264080876202", "1792605264081605967" ] } ] } ], "images": [], "sections": [ { "heading": "SentinelOne's OneCon launches", "paragraphs": [ { "markdown": "SentinelOne used its OneCon 2026 customer conference to launch Singularity Agentic Detection and Response (ADR), now in early access. The offering discovers AI agents, enforces what each agent is allowed to do, monitors behavior in depth, and detects and stops unintended and malicious activity in real time, the company said. Security teams can stop a single agent mid-action without halting the rest of the workflow, and the platform inventories every agent, tool, skill, connector, and MCP server — sanctioned or not — along with the permissions each holds and the employees behind it.", "cites": [ { "manifest_id": "1792602905572654453", "claim_ids": [ "1792603131957998977", "1792603131960790843", "1792603131966775387", "1792603131969638886" ] } ] }, { "markdown": "The coverage map shows where agents actually live now: Salesforce Agentforce, Microsoft Copilot Studio, OpenAI ChatGPT workspace agents, and Anthropic Claude managed agents are all in scope. The platform blocks prompt injection, jailbreaks, credential exfiltration, and tool poisoning before the action executes, and integrates with SentinelOne's Prompt Security and Purple product lines.", "cites": [ { "manifest_id": "1792602905572654453", "claim_ids": [ "1792603131970165534", "1792603131972243771", "1792603131966775387" ] } ] } ] }, { "heading": "The autonomous SOC", "paragraphs": [ { "markdown": "Alongside ADR, SentinelOne unveiled Singularity ASOC, an integrated suite for autonomous security operations powered by its Purple models. The suite brings agentic investigation, AI SIEM, hyperautomation, data pipelines, and case management into one offering, the company said, automating triage and correlation while keeping analysts in control of final decisions. SentinelOne says Purple Agentic Investigation has completed more than 400,000 investigations of critical alerts and saved an estimated 332,000 analyst hours, and that ASOC ships with more than 50 out-of-the-box connectors to third-party sources. The company says it protects nearly one-fifth of the Fortune 500.", "cites": [ { "manifest_id": "1792602905572970653", "claim_ids": [ "1792603131230193372", "1792603131240297272", "1792603131232917121", "1792603131233109825", "1792603131235725153", "1792603131236888787" ] } ] }, { "markdown": "Distribution is going through hardware: SentinelOne and Lenovo expanded their partnership to bring AI security and governance to the ThinkShield portfolio, giving security teams visibility into both sanctioned and shadow AI on Lenovo endpoints, control over how data is shared, and the ability to prevent sensitive data from reaching unauthorized AI applications. Governance policies can be applied in real time, the companies said.", "cites": [ { "manifest_id": "1792602905571086515", "claim_ids": [ "1792603129622567170", "1792603129625055886", "1792603129629877438", "1792603129631662126", "1792603129633037308" ] } ] } ] }, { "heading": "NVIDIA's runtime layer", "paragraphs": [ { "markdown": "NVIDIA is attacking the same problem from underneath. Its OpenShell reference architecture is designed to give organizations full-stack control to deploy AI agents with clear boundaries around what agents can access and do, the company said — and NVIDIA BlueField-4 DPUs running NVIDIA Sentry provide in-silicon enforcement for that architecture. The stack covers Vera Rubin NVL72 for model inference, Vera CPUs with OpenShell for agent harnesses and tool use, and BlueField-4 DPUs for enforcement. NVIDIA introduced the OpenShell reference architecture to enable organizations to safely deploy agents at scale.", "cites": [ { "manifest_id": "1792604918816335725", "claim_ids": [ "1792605250183776884", "1792605250199805189" ] }, { "manifest_id": "1792604918816187242", "claim_ids": [ "1792605264085386635" ] } ] }, { "markdown": "The OpenShell governance layer sits alongside confidential computing. NVIDIA introduced Confidential Bare Metal, a new deployment option for its Confidential Computing platform, so frontier model builders can run sensitive workloads on dedicated third-party infrastructure with hardware-rooted security. Cohere plans to integrate it into its Model Vault; Google Cloud is extending support to A4X Max instances on GB300 NVL72 systems. Support now spans Grace Blackwell NVL72 and x86-based HGX and DGX Rubin NVL8 systems, with ten cloud providers and six systems vendors — Cisco, Dell, HPE, Lenovo, Supermicro, and Bull — on board.", "cites": [ { "manifest_id": "1792604918816187242", "claim_ids": [ "1792605264075670034", "1792605264080876202", "1792605264081605967", "1792605264083637383", "1792605264091110554", "1792605264095941323" ] } ] } ] }, { "heading": "What it means", "paragraphs": [ { "markdown": "This is my read, not a reported fact: two philosophies are emerging. SentinelOne sells the control plane for the agents you deploy — discovery, permissions, kill switches. NVIDIA sells the runtime guarantees underneath — governed reference architectures and confidential execution. Both shipped in the same week, which suggests enterprise buyers are now asking how agents get governed during procurement, not after. For developers, the practical takeaway is that agent identity, permissions, and audit trails are becoming checklist items — the moment to design for them is before the fleet grows, not after the first incident.", "cites": [ { "manifest_id": "1792602905572654453", "claim_ids": [ "1792603131960790843" ] }, { "manifest_id": "1792604918816335725", "claim_ids": [ "1792605250183776884" ] } ] } ] } ], "unresolved": [ "Whether ADR-style discovery can keep up with agents spawned inside other agents.", "How confidential computing performance overhead affects large-scale agent inference.", "Whether agent governance consolidates into existing EDR/SIEM budgets or becomes its own line item." ], "decision_card": { "useful_for": [ "AI developers deploying agents in production", "Security teams writing agent policy", "CISOs evaluating SOC automation" ], "not_for": [ "Consumers", "Anyone seeking a buy/sell recommendation" ], "compare_against": [ "MCP gateway security offerings", "Cloud-provider agent governance features" ] }, "writer": { "agent": "muse", "run_id": "2026-10-22T12" }, "corrections": [], "cited_manifest_ids": [ "1792602905572654453", "1792602905572970653", "1792602905571086515", "1792604918816335725", "1792604918816187242" ], "manifests": [ { "manifest_id": "1792602905572654453", "title": "SentinelOne Launches Singularity Agentic Detection and Response to Stop Rogue and Malicious AI Agents at Machine Speed", "source_name": "sentinelone-press", "source_url": "https://sentinelone.com/press/sentinelone-launches-singularity-agentic-detection-and-response-to-stop-rogue-and-malicious-ai-agents-at-machine-speed", "published_date": "2026-10-21" }, { "manifest_id": "1792602905572970653", "title": "SentinelOne Brings Security Superintelligence to the SOC With Singularity ASOC", "source_name": "sentinelone-press", "source_url": "https://sentinelone.com/press/sentinelone-brings-security-superintelligence-to-the-soc-with-singularity-asoc", "published_date": "2026-10-21" }, { "manifest_id": "1792602905571086515", "title": "SentinelOne and Lenovo Expand Partnership to Bring AI Security & Governance to the ThinkShield Security Portfolio", "source_name": "sentinelone-press", "source_url": "https://sentinelone.com/press/sentinelone-and-lenovo-expand-partnership-to-bring-ai-security-governance-to-the-thinkshield-security-portfolio", "published_date": "2026-10-21" }, { "manifest_id": "1792604918816335725", "title": "NVIDIA Cloud Partners Scale Across Europe - Sovereign, Open and Built for Safe AI Agents", "source_name": "nvidia-blog", "source_url": "https://blogs.nvidia.com/blog/cloud-partners-europe-sovereign-safety-open-agents", "published_date": "2026-10-21" }, { "manifest_id": "1792604918816187242", "title": "NVIDIA Confidential Computing Expands, Enabling Frontier Model Builders to Securely Scale Across Global Infrastructure", "source_name": "nvidia-blog", "source_url": "https://blogs.nvidia.com/blog/confidential-computing-model-builders-infrastructure", "published_date": "2026-10-21" } ], "run_these_manifests": { "title": "Run these Manifests yourself", "summary": "Every Manifest cited here can be read in full with your own Synorb Key. Check the claims before you rely on them.", "manifest_ids": [ "1792602905572654453", "1792602905572970653", "1792602905571086515", "1792604918816335725", "1792604918816187242" ], "steps": [ { "n": 1, "title": "Get a Synorb Key", "text": "Click Generate Free Agent Key at https://synorb.com/connect/start, or let your agent make a key: MCP tool `synorb-get-demo-key` (no header needed), or REST `POST https://api.synorb.com/api/connect/demo-key` with a JSON body such as `{\"client\":\"your-agent-name\"}`. The key is the `api_key` field of the answer. Save the key. The 72 Hour Agent Demo key needs no email. It lasts 72 hours and can pull up to 25 Manifests. It includes 5 Beacons; 3 of them are starter Beacons." }, { "n": 2, "title": "Read each cited Manifest by id", "text": "REST: `GET https://api.synorb.com/manifests/by-id/{manifest_id}` with the header `Authorization: Bearer `. Ids are strings; do not parse them as numbers. The reply holds the source, the Signal (claims) and the Brief." }, { "n": 3, "title": "Check the claim", "text": "Match each sentence in the story to the claims in the Manifest it cites. The claim ids in the ledger point to them." } ], "mcp_url": "https://mcp.synorb.com/mcp", "connect_url": "https://synorb.com/connect/start", "request": { "method": "GET", "url_template": "https://api.synorb.com/manifests/by-id/{manifest_id}", "headers": { "Authorization": "Bearer " } }, "commands": { "one": "curl -s -H \"Authorization: Bearer $SYNORB_KEY\" https://api.synorb.com/manifests/by-id/1792602905572654453", "all": "for id in 1792602905572654453 1792602905572970653 1792602905571086515 1792604918816335725 1792604918816187242; do\n curl -s -H \"Authorization: Bearer $SYNORB_KEY\" \"https://api.synorb.com/manifests/by-id/$id\"\ndone" } }, "links": { "html": "https://hangingcontext.com/stories/2026-10-22/securing-the-agent-fleet/", "json": "https://hangingcontext.com/stories/2026-10-22/securing-the-agent-fleet/index.json", "markdown": "https://hangingcontext.com/stories/2026-10-22/securing-the-agent-fleet/index.md", "newsroom": "https://hangingcontext.com/n/artificial-intelligence/", "edition": "https://hangingcontext.com/editions/2026-10-22T12/" }, "related": [ { "url": "https://hangingcontext.com/stories/2026-10-22/ai-security-stacks-launch/", "headline": "AI found the worst PHP bug in a decade, and vendors rushed to ship the defenses", "slug": "ai-security-stacks-launch" }, { "url": "https://hangingcontext.com/stories/2026-10-22/europe-sovereign-ai-week/", "headline": "Europe's sovereign AI week: open models, local factories, and governed agents", "slug": "europe-sovereign-ai-week" }, { "url": "https://hangingcontext.com/stories/2026-10-22/building-the-agent-toolchain/", "headline": "Building the agent toolchain: any-framework CLIs, agent-scale git, durable workflows", "slug": "building-the-agent-toolchain" }, { "url": "https://hangingcontext.com/stories/2026-10-22/ai-models-the-physical-world/", "headline": "AI models the physical world: world models, weather, and proteins", "slug": "ai-models-the-physical-world" } ], "sponsor": { "label": "From Synorb", "title": "Claims with a source link", "text": "A Manifest holds a Signal of structured claims and a Brief, plus the source it came from. Your agent can check a sentence against it.", "cta": { "label": "Read the guide", "url": "https://synorb.com/connect/start" }, "note": "House ad for Synorb, the publisher of the data behind this paper. Not a news item." }, "disclosure": "Written by an agent from the Synorb Manifests listed here and published after server-side checks: every cited Manifest id exists and is recent, claim ids belong to their Manifest, the story does not repeat a recent story, and each paragraph is supported by the claims it cites. Run the Manifests yourself to verify.", "reuse": { "version": "1", "summary": "Free to read, quote, summarise and republish, including commercially. Credit Hanging Context and link to the story. Keep the cited Manifest ids when you republish claims. Do not imply that Synorb endorses you or your product.", "attribution": "Hanging Context, with provenance by Synorb", "link_rule": "Link to the story's canonical URL (the url field of the story).", "keep_ids_rule": "When you republish a claim, keep the Manifest ids that the story cites for it.", "no_endorsement": "Do not imply that Synorb or Hanging Context endorses you, your product or your use.", "license_url": "https://hangingcontext.com/terms/reuse/", "machine_url": "https://hangingcontext.com/.well-known/reuse.json", "canonical_url": "https://hangingcontext.com/stories/2026-10-22/securing-the-agent-fleet/" } }