* [Blog](https://www.paloaltonetworks.com.au/blog) * [Security Operations](https://www.paloaltonetworks.com.au/blog/security-operations/) * [Agent Security](https://www.paloaltonetworks.com.au/blog/ai-security/category/agent-security/) * Your EDR is Blind to the ... # Your EDR is Blind to the Agentic Frontier [](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fsecurity-operations%2Fyour-edr-is-blind-to-the-agentic-frontier%2F) [](https://twitter.com/share?text=Your+EDR+is+Blind+to+the+Agentic+Frontier&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fsecurity-operations%2Fyour-edr-is-blind-to-the-agentic-frontier%2F) [](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2Fsecurity-operations%2Fyour-edr-is-blind-to-the-agentic-frontier%2F&title=Your+EDR+is+Blind+to+the+Agentic+Frontier&summary=&source=) [](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com.au/blog/security-operations/your-edr-is-blind-to-the-agentic-frontier/&ts=markdown) \[\](mailto:?subject=Your EDR is Blind to the Agentic Frontier) Link copied By [Anna Qi](https://www.paloaltonetworks.com/blog/author/anqi/?ts=markdown "Posts by Anna Qi") and [Tali Ash](https://www.paloaltonetworks.com/blog/author/tali-ash/?ts=markdown "Posts by Tali Ash") Aug 10, 2026 4 minutes [Agent Security](https://www.paloaltonetworks.com/blog/ai-security/category/agent-security/?ts=markdown) [Agentic Identity Security](https://www.paloaltonetworks.com/blog/identity-security/category/agentic-identity-security/?ts=markdown) [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown) [AI Governance](https://www.paloaltonetworks.com/blog/ai-security/category/ai-governance/?ts=markdown) [AI Security](https://www.paloaltonetworks.com/blog/cloud-security/category/ai-security/?ts=markdown) [Announcement](https://www.paloaltonetworks.com/blog/cloud-security/category/announcement/?ts=markdown) [Assess AI Risks](https://www.paloaltonetworks.com/blog/ai-security/category/assess-ai-risks/?ts=markdown) [Develop AI Safely](https://www.paloaltonetworks.com/blog/ai-security/category/develop-ai-safely/?ts=markdown) [Machine Identity Security](https://www.paloaltonetworks.com/blog/identity-security/category/machine-identity-security/?ts=markdown) [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown) [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown) [Non-Human Identity Security](https://www.paloaltonetworks.com/blog/identity-security/category/non-human-identity-security/?ts=markdown) [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [Secure AI Infrastructure](https://www.paloaltonetworks.com/blog/ai-security/category/secure-ai-infrastructure/?ts=markdown) [Secure GenAI Use](https://www.paloaltonetworks.com/blog/ai-security/category/secure-genai-use/?ts=markdown) [Agentic AI](https://www.paloaltonetworks.com/blog/tag/agentic-ai/?ts=markdown) [agentic endpoint security](https://www.paloaltonetworks.com/blog/tag/agentic-endpoint-security/?ts=markdown) [Agentic Security](https://www.paloaltonetworks.com/blog/tag/agentic-security/?ts=markdown) [Cortex](https://www.paloaltonetworks.com/blog/tag/cortex/?ts=markdown) [EDR](https://www.paloaltonetworks.com/blog/tag/edr/?ts=markdown) [Koi](https://www.paloaltonetworks.com/blog/tag/koi/?ts=markdown) [Software Supply Chain Security](https://www.paloaltonetworks.com/blog/tag/software-supply-chain-security/?ts=markdown) [Supply Chain Attacks](https://www.paloaltonetworks.com/blog/tag/supply-chain-attacks/?ts=markdown) [XDR](https://www.paloaltonetworks.com/blog/tag/xdr/?ts=markdown) We are living through a massive shift in how teams get work done. For years, the industry talked about digital transformation as a distant vision. Today, it is happening in real time right at the front of every employee screen. AI is no longer a simple feature. It has become the core operating system of modern work. We see developers writing code at lightning speed and marketing teams deploying autonomous agents to handle complex workflows. This leap in productivity is remarkable, but it is also completely redefining the defensive perimeter. ### **The Structural Blind Spot** For a long time, security leaders operated under one comfortable assumption: If we secured the execution layer, which are traditional applications and operating systems, we secured the enterprise. We built world-class tools to watch for malicious processes. That was enough to keep the organization safe. ![AI Agents \& Agentic Tools Are On Nearly Every Endpoint](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/08/Screenshot-2026-08-10-at-11.26.54-AM-e1786390409844.png) Figure 1: AI Agents \& Agentic Tools Are On Nearly Every Endpoint As organizations move toward frontier AI, we are discovering a structural blind spot. The modern endpoint is no longer just a device running Windows or macOS. It is a stack of agentic software, sophisticated AI models, and specialized skills. Employees often self-provision these tools to work faster. This new "Agentic Perimeter" represents a fundamental shift in the software stack. Think about your average developer: Their environment is a web of scripts, IDE extensions, package registries, and autonomous agents. Gartner recently identified [agentic AI oversight as a top cybersecurity priority for 2026](https://www.gartner.com/en/newsroom/press-releases/2026-02-05-gartner-identifies-the-top-cybersecurity-trends-for-2026). These tools are powerful and essential, yet they often operate outside the view of traditional security controls. ### **Shifting Left in Agentic Security** Traditional security is a game of catch-up. It waits for something to go wrong, detects the problem, and then tries to fix it. When an autonomous AI can move through an entire attack in minutes, waiting to react is just waiting for a breach to happen. Leaders should not have to choose between letting their teams use the best AI tools and keeping their organizations secure. To thrive in this era, we need to move the defensive line. Instead of scanning for threats after the fact, we need to secure the software supply chain to include AI agents and their endpoints. When an employee connects a new AI agent, they are trying to be productive, not launch an attack. We need a way to manage the risk of trusted tools being used in untrusted ways. This is why industry leaders are turning to **Agentic Endpoint Security (AES)** . By placing a context aware control point directly on the endpoint, organizations can finally close the visibility gap that frontier AI is already beginning to exploit. ### **The 4 Pillars of Agentic Endpoint Security** Security should never slow people down. The goal is to create a safe, frictionless path for innovation to thrive. This is why customers need [Agentic Endpoint Security (AES](https://www.paloaltonetworks.com/cortex/agentic-endpoint-security)) that operates across four critical areas. ![4 Pillars of Agentic Endpoint Security](https://www.paloaltonetworks.com/blog/wp-content/uploads/2026/07/Screenshot-2026-07-28-at-1.54.39-PM.png) Figure 2: 4 Pillars of AES **1. Visibility:** AES provides total and continuous visibility into every software artifact and autonomous agent in real time. This includes complete coverage of the entire ecosystem, including AI models, extensions, MCP servers, non-binaries, and live runtime actions on the device. **2. Context Aware Risk:** Using a risk engine, it performs deep analysis of every software package and AI extension. It delivers context aware risk levels based on reputation, code intent, and privilege boundaries. **3. AI Governance and Control:** Security teams can govern the entire AI ecosystem by reducing the attack surface through continuous monitoring of what is installed, tracking AI agent behavior, and enforcing strict execution boundaries for all autonomous tools. **4. Prevention:** AES proactive intercepts and blocks risky AI extensions before they are even installed. It also enforces ML- powered runtime policies to control agent behavior and execution boundaries in real time, stopping malicious actions and prompt injections before they occur. This shifts security from reactive triage to instantaneous prevention by controlling the agentic supply chain. By bringing this intelligence [into platforms like Cortex®](https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-completes-acquisition-of-koi-to-secure-the-agentic-endpoint), organizations see a more complete story of their agentic endpoints. This approach ensures that protection is built directly on the endpoint. That is the only location capable of providing continuous visibility and control over the entire AI attack surface in real time. This is about more than stopping attacks. It is about giving your organization the confidence to lean into the future of AI. The era of the unmanaged endpoint is behind us. To learn more about how to stay ahead of AI threats and secure your environment, watch our [on-demand webinar](https://register.paloaltonetworks.com/prevent-ai-driven-attacks-aes)or visit [paloaltonetworks.com/cortex/agentic-endpoint-security](https://paloaltonetworks.com/cortex/agentic-endpoint-security). *** ** * ** *** ## Related Blogs ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [#### What's New in Cortex (May '26)](https://www.paloaltonetworks.com.au/blog/security-operations/whats-new-in-cortex-may-26/) ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [#### Threat Intelligence in the Era of AI](https://www.paloaltonetworks.com.au/blog/security-operations/threat-intelligence-in-the-era-of-ai/) ### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [#### What's New in Cortex](https://www.paloaltonetworks.com.au/blog/security-operations/whats-new-in-cortex/) ### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [#### Cortex Copilot - Another Step Forward in SOC Transformation](https://www.paloaltonetworks.com.au/blog/security-operations/cortex-copilot-another-step-forward-in-soc-transformation/) ### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [News and Events](https://www.paloaltonetworks.com/blog/security-operations/category/news-and-events/?ts=markdown), [Product Features](https://www.paloaltonetworks.com/blog/security-operations/category/product-features/?ts=markdown) [#### What's Next in Cortex: New Innovations for Security Operations](https://www.paloaltonetworks.com.au/blog/security-operations/whats-next-in-cortex-new-innovations-for-security-operations/) ### [AI and Cybersecurity](https://www.paloaltonetworks.com/blog/security-operations/category/ai-and-cybersecurity/?ts=markdown), [Uncategorized](https://www.paloaltonetworks.com/blog/category/uncategorized/?ts=markdown) [#### What's New in Cortex](https://www.paloaltonetworks.com.au/blog/security-operations/whats-new-in-cortex-july-2026/) ### Subscribe to Security Operations Blogs! Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more. ![spinner](https://www.paloaltonetworks.com.au/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up Please enter a valid email. By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder. This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply. {#footer} {#footer} Products and Services * [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown) * [Secure AI by Design](https://www.paloaltonetworks.com/ai-security?ts=markdown) * [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown) * [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown) * [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown) * [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown) * [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown) * [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown) * [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown) * [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown) * [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown) * [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown) * [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown) * [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown) * [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown) * [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown) * [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown) * [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown) * [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown) * [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown) * [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown) * [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown) * [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown) * [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown) * [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown) * [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown) * [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown) * [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown) * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown) * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown) * [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown) * [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown) * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown) * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown) * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown) * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown) * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown) * [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown) * [Next-Generation Identity Security](https://www.paloaltonetworks.com/idira?ts=markdown) * [Privileged Access Management](https://www.paloaltonetworks.com/idira/human/privileged-access-management?ts=markdown) * [Identity and Access Management](https://www.paloaltonetworks.com/idira/human/identity-and-access-management?ts=markdown) * [Endpoint Privilege Manager](https://www.paloaltonetworks.com/idira/human/endpoint-privilege-manager?ts=markdown) * [Identity Governance](https://www.paloaltonetworks.com/idira/human/identity-governance?ts=markdown) * [Workforce Password Management](https://www.paloaltonetworks.com/idira/human/workforce-password-management?ts=markdown) * [Agentic Identities](https://www.paloaltonetworks.com/idira/agentic?ts=markdown) * [Secrets Management](https://www.paloaltonetworks.com/idira/machine/secrets-management?ts=markdown) * [Unified Secrets Governance](https://www.paloaltonetworks.com/idira/machine/unified-secrets-governance?ts=markdown) * [Application Credentials Delivery](https://www.paloaltonetworks.com/idira/machine/application-credentials-delivery?ts=markdown) * [Vendor Privileged Access](https://www.paloaltonetworks.com/idira/human/vendor-privileged-access?ts=markdown) * [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown) * [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown) * [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown) * [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown) * [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown) Company * [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown) * [Careers](https://jobs.paloaltonetworks.com/en/) * [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown) * [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown) * [Customers](https://www.paloaltonetworks.com/customers?ts=markdown) * [Investor Relations](https://investors.paloaltonetworks.com/) * [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown) * [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown) Popular Links * [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown) * [Communities](https://www.paloaltonetworks.com/communities?ts=markdown) * [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown) * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown) * [Event Center](https://events.paloaltonetworks.com/) * [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center) * [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown) * [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown) * [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown) * [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown) * [Tech Docs](https://docs.paloaltonetworks.com/) * [Unit 42](https://unit42.paloaltonetworks.com/) * [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd) ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg) * [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown) * [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown) * [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) * [Documents](https://www.paloaltonetworks.com/legal?ts=markdown) Copyright © 2026 Palo Alto Networks. All Rights Reserved * [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks) * [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown) * [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/) * [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks) * [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks) * EN Select your language