* [Blog](https://www.paloaltonetworks.com.au/blog) * [Palo Alto Networks](https://www.paloaltonetworks.com.au/blog/corporate/) * [Products and Services](https://www.paloaltonetworks.com.au/blog/category/products-and-services/) * Secure AI Coding: Governi... # Secure AI Coding: Governing every agent, artifact, and identity [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2026%2F09%2Fsecure-ai-coding-governing-every-agent-artifact-and-identity%2F) [](https://twitter.com/share?text=Secure+AI+Coding%3A+Governing+every+agent%2C+artifact%2C+and+identity&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2026%2F09%2Fsecure-ai-coding-governing-every-agent-artifact-and-identity%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2026%2F09%2Fsecure-ai-coding-governing-every-agent-artifact-and-identity%2F&title=Secure+AI+Coding%3A+Governing+every+agent%2C+artifact%2C+and+identity&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com.au/blog/2026/09/secure-ai-coding-governing-every-agent-artifact-and-identity/&ts=markdown) \[\](mailto:?subject=Secure AI Coding: Governing every agent, artifact, and identity) Link copied By [Anand Oswal](https://www.paloaltonetworks.com/blog/author/anand-oswal/?ts=markdown "Posts by Anand Oswal") Sep 10, 2026 4 minutes [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [Secure AI Coding](https://www.paloaltonetworks.com/blog/tag/secure-ai-coding/?ts=markdown) Enterprises are seeing an unprecedented surge in AI coding adoption with spend on AI coding tools projected to top $13 billion in this calendar year^1^, compounding at more than 60% annually. For engineering teams, the benefits are unmistakable: accelerated output, supercharged productivity, and operational overheads dramatically reduced. But these AI solutions are no longer just offering helpful coding suggestions. Today's coding agents are able to assume a user's identity, modify file systems, execute arbitrary terminal commands, and connect directly into core business systems. Traditional cybersecurity architectures were engineered around three foundational assumptions: known software, human users, and human-speed actions. AI coding fundamentally dismantles all three. ## The Breakdown of Traditional Controls for Secure Software Development. As AI-assisted coding accelerates, traditional security controls are quickly falling behind, creating four volatile vectors of risk: * **Shadow AI at Enterprise Scale** : Coding agents, IDE (Integrated Developer Environment) extensions, skills, and MCP (Model Context Protocol) servers permeate the enterprise before security teams even know they exist. In 2026, 68% of organizations reported lacking visibility into the AI tools their developers were actually using, and 57% of employees reported using AI coding tools without formal IT approval^2^. * **Risky Behavior by Agents** : AI coding agents have the capability to change files, access company resources, and execute system commands in milliseconds. In one documented^3^AI-enabled intrusion chain, an agent executed 17,600 actions in 4.5 days creating a timeline no human-enabled SOC can manually govern. * **Blurred Identity and Attribution** : Machines now outnumber human identities 109 to 1^4^. And, because agents frequently operate using human credentials, distinguishing developer action from autonomous agent action becomes nearly impossible. When anomalies occur, this obscured attribution further complicates root causing the issue. * **Uncontrolled Connections, Data, and Cost** : Agents connecting to external models, MCP servers, and third-party tools outside the company, presents another distinct but related issue. All these connections also quietly increase consumption of AI resources, and separately exacerbate the risk of sensitive IP leaks. A recent survey found^5^ that 93% of enterprises exceeded their AI budgets with 20-30% of AI spend being entirely unaccounted for. ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/09/SecureAICoding_Diagram_Option3f-scaled.png) ## Resetting the Controls for AI-Native Development. Securing AI coding inside an enterprise requires a proactive, platform-centric approach: * **Discover shadow AI and what it's using:** Gain complete visibility across every model, agents, plugin, skill, and MCP to neutralize risky or unsanctioned components before they perform harmful actions. * **Assess supply chain risks:** Scan skills, models, and MCP to make sure they are trusted. * **Protect identity and prompt:** Inspect prompts, model outputs, and autonomous interactions in real time. Provision verified, task-scoped identities for agents and eliminate standing privileges. * **Govern data, actions, and cost:** Enforce zero-trust boundaries over external model connections, governing access to file systems, sensitive corporate data, and establishing hard policies over AI resource consumption and spend. ## The Platformization Advantage for Superior Governance. Today, endpoint visibility, LLM traffic, token consumption, agent identity and actions are fragmented across disparate solutions introducing visibility gaps and creating new risks for enterprises. Palo Alto Networks delivers AI coding security natively with an integrated platform to secure what gets installed, what runs, what data leaves the enterprise, and which identity is used. AI coding tools will continue to evolve, as they should. But your builders don't have to choose between speed and security. The goal is not to slow down developer momentum, but to provide the security controls that serve as scaffolding for your teams to innovate faster and with complete confidence. Secure your AI. We've got next. Visit our [Secure AI Coding](https://www.paloaltonetworks.com/secure-ai-coding.html) page or [download our solution brief](https://www.paloaltonetworks.com/resources/techbriefs/secure-ai-coding) to learn more. *** ** * ** *** 1 - [IdeaPlan](https://www.ideaplan.io/blog/ai-coding-assistant-market-share-2026) 2 - [The AI Velocity Gap](https://labs.cloudsecurityalliance.org/research/csa-whitepaper-ai-velocity-gap-development-security-capacity/#:~:text=Governance%20gaps%20compound%20the%20technical%20ones.%20In%202026%2C%2068%20percent%20of%20organizations%20lack%20visibility%20into%20the%20AI%20tools%20their%20developers%20are%20actually%20using%2C%20and%2057%20percent%20of%20employees%20report%20using%20AI%20coding%20tools%20without%20formal%20IT%20approval%20%5B12%5D.) 3 - [Hugging Face](https://github.com/huggingface/blog/blob/main/agent-intrusion-technical-timeline.md) 4 - [Idira 2026 Identity Security Landscape](https://www.paloaltonetworks.com/idira/identity-security-landscape-report) - Chapter One 5 - [McKinsey](https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-cost-of-intelligence-how-cios-can-manage-ai-demand-at-scale); [Oabo](https://oaboscorecard.com/insights/over-budget-and-unaccounted) *** ** * ** *** ## Related Blogs ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Cybersecurity](https://www.paloaltonetworks.com/blog/category/cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown) [#### Cortex XDR Scores Perfect 100% in SE Labs 2026 Ransomware Test](https://www.paloaltonetworks.com.au/blog/security-operations/cortex-xdr-scores-perfect-100-in-se-labs-2026-ransomware-test/) ### [5G](https://www.paloaltonetworks.com/blog/sase/category/5g/?ts=markdown), [MSP](https://www.paloaltonetworks.com/blog/sase/category/msp/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Secure Browser](https://www.paloaltonetworks.com/blog/sase/category/secure-browser/?ts=markdown) [#### Managed Enterprise Browser Security with Prisma Browser for MSPs](https://www.paloaltonetworks.com.au/blog/sase/managed-enterprise-browser-security-with-prisma-browser-for-msps/) ### [5G](https://www.paloaltonetworks.com/blog/sase/category/5g/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/sase/category/partner-integrations/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/sase/category/use-cases/?ts=markdown) [#### 5G SASE for OT Security: Stopping the Cellular APN Blind Spot](https://www.paloaltonetworks.com.au/blog/sase/5g-sase-for-ot-security-stopping-the-cellular-apn-blind-spot/) ### [Agentic Identity Security](https://www.paloaltonetworks.com/blog/identity-security/category/agentic-identity-security/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Partners](https://www.paloaltonetworks.com/blog/category/partners/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown) [#### Scale Enterprise Agentic AI Securely With Idira and Claude](https://www.paloaltonetworks.com.au/blog/identity-security/securing-claude-ai-agents-idira/) ### [Product Features](https://www.paloaltonetworks.com/blog/sase/category/product-features/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [SD-WAN](https://www.paloaltonetworks.com/blog/sase/category/sd-wan/?ts=markdown) [#### Probes Are Never Enough, Never Have Been, Never Will Be](https://www.paloaltonetworks.com.au/blog/sase/probes-are-never-enough-never-have-been-never-will-be/) ### [Agent Security](https://www.paloaltonetworks.com/blog/ai-security/category/agent-security/?ts=markdown), [AI Security](https://www.paloaltonetworks.com/blog/category/ai-security/?ts=markdown), [Data Security](https://www.paloaltonetworks.com/blog/network-security/category/data-security/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown), [SaaS Security](https://www.paloaltonetworks.com/blog/network-security/category/saas-security/?ts=markdown) [#### Securing the Agentic Shift: Data Protection Across the AI Data Path](https://www.paloaltonetworks.com.au/blog/sase/securing-the-agentic-shift-data-protection-across-the-ai-data-path/) ### Subscribe to the Blog! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com.au/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language