ThreatLocker launches Zero Trust AI Control for agents

ThreatLocker has launched Zero Trust AI Control, a tool designed to govern what AI agents can do inside corporate systems. The product targets organisations using agentic AI in operational environments.

The new control layer is intended to let security teams define which AI tools are permitted and restrict what those tools can access, execute and connect to once deployed.

The launch comes as businesses move beyond using artificial intelligence for information retrieval and begin giving software agents permission to carry out tasks across applications, scripts, browsers and other services. That shift creates a different security problem: an AI agent may be able to trigger a chain of actions inside an organisation's environment.

Many existing safeguards rely on an agent following its own internal rules. Zero Trust AI Control instead applies restrictions outside the AI system itself, using ThreatLocker's default-deny approach so agents can reach only the resources needed for a defined job and are blocked from everything else.

According to ThreatLocker, the product includes recommended policies that security teams can use as a starting point before tailoring controls to their own environments. Those pre-built guardrails are intended to reduce the work involved in setting limits on how AI agents operate.

In practice, a single instruction sent to an AI agent can lead to actions across several systems. ThreatLocker said the product is designed to maintain security boundaries throughout that workflow, including control over what an agent can access, what it can run and which external services it can connect to.

Changing risk

ThreatLocker framed the launch around a broader shift in how organisations are adopting AI. Rather than acting only as assistants that generate text or provide answers, newer agents are increasingly being asked to complete tasks directly inside business environments.

"The security challenge has fundamentally changed because AI agents aren't just providing information anymore. They're being used to take actions across an organisation's environment," said Danny Jenkins, Chief Executive Officer and Co-Founder of ThreatLocker.

He added: "Organisations around the world need a way to adopt AI with the peace of mind that they aren't handing over the keys to their environments."

Zero Trust AI Control works alongside ThreatLocker's existing Allowlisting and Web Content Control products. The company said this gives security teams oversight from the point an AI application or browser-based AI service is admitted into the environment through to the actions an authorised agent can take afterwards.

The launch also reflects a wider effort by cybersecurity suppliers to adapt zero trust principles to AI adoption. In this case, ThreatLocker is seeking to extend a model commonly used to restrict software and user activity so it also applies to autonomous or semi-autonomous agents acting on a user's behalf.

Company footprint

ThreatLocker describes itself as a global cybersecurity provider focused on preventing unauthorised software and activity across endpoints, networks and cloud systems. It says it protects more than 70,000 organisations worldwide and operates from Orlando, Florida, with additional offices in Dublin, Dubai and Brisbane.

Zero Trust AI Control is aimed at organisations that want to introduce agentic AI into their operations while keeping a separate enforcement layer between the agent and the underlying environment.