<img alt="" src="https://secure.leadforensics.com/65214.png" style="display:none;">

Getting Started with Agentic AI: Discovery & Governance

Agentic AI is developing quickly, and for many organisations the first challenge is simply understanding what is already in use. AI agents and other non-human identities can exist across cloud platforms, SaaS applications and development environments, making traditional approaches to discovery increasingly difficult.


But discovery is only the starting point. As new agents appear, organisations need an ongoing way to understand what they are, who owns them, what they can access and whether they are operating as expected.


In this fireside chat, ProofID CEO Tom Eggleston is joined by Matt Bruun, VP for Agentic Technologies at SailPoint, to discuss how organisations can approach agentic AI discovery and governance in practice. They explore what organisations are finding when they begin looking for AI agents, the challenge of shadow AI, and how identity can provide the foundations for adopting agentic AI securely and at scale.

What You'll Learn

  • Where to start with discovering AI agents and non-human identities.

  • How shadow AI discovery can help build a case for further action.

  • How identity governance applies to agent ownership and access.

  • Why real-time detection matters when agents move beyond their intended boundaries.

  • Which teams need to work together, and what progress could look like over the next 12 months.

 

Why this matters:
  • Understand the AI already in use across your organisation.
  • Identify risks associated with agent access and credentials.
  • Establish accountability as agentic AI adoption grows.
  • Turn discovery findings into a practical plan for secure adoption.
SPEAKERS
tom eggleston CEO ProofID-1

Tom Eggleston

CEO, ProofID
Matt Bruun Headshot.jpg

Matt Bruun

VP EMEA - Agentic Technology Specialists at SailPoint

Frequently Asked Questions

What is agentic AI discovery?

Agentic AI discovery is the process of identifying the AI agents and non-human identities operating across an organisation, including where they exist, what they are doing and what they can access. Discovery needs to be continuous as new agents can be created and changed quickly across cloud, SaaS and development environments.

Why is discovery important for agentic AI security?

You can’t effectively govern or secure an AI agent if you don’t know it exists. Discovery gives organisations visibility of their agent landscape and provides the starting point for establishing ownership, assessing access and bringing agents under appropriate governance.

How big of a problem is shadow AI?

Shadow AI is a growing challenge because the barrier to building AI agents has never been lower, with no-code and low-code options commonplace. This means adoption can quickly outpace an organisation's visibility of what's happening. Before you can govern agent access, you need to know what agents exist, where they're operating and what they're connecting to.

Can existing identity governance approaches be used for AI agents?

Many of the same identity principles still apply, including role-based access, ownership and reducing standing privileges. However, AI agents can operate at machine speed and may require governance and controls that can respond in real time. 

Where should organisations start with agentic AI security?

Start with discovery. Understanding which AI agents and tools are already in use gives teams a baseline from which to build an appropriate governance plan. The level of control required will vary by organisation, but knowing what you have is the essential first step.

What is an agentic gateway?

An agentic gateway sits between AI agents and the systems they need to access, providing a central point to manage authentication and enforce access policies. This means developers don't need to build identity controls into individual agents, while identity teams can maintain control over what agents are allowed to access.

Where should organisations start with agentic AI security?

A good place to start is with discovery. Understand which agents and platforms are already in use, then prioritise a small number based on value, use or risk. From there, identity, security and agent-building teams can work together to establish the controls and build a blueprint for wider adoption.

Related resources

1 Aug 2025 - 2 min read

Identity and access management technology

Customer Identity SailPoint Case Study Education
All Change: Building a Secure Identity Strategy for Higher Education’s Next Decade

16 Jul 2025 - 2 min read

All Change: Building a Secure Identity Strategy for Higher Education’s Next Decade

Higher Education Education Webinar
Smart Campus: The Role of Digital Identity in Future-Proofing the Student Journey (US)

9 Jan 2025 - 2 min read

Smart Campus: The Role of Digital Identity in Future-Proofing the Student Journey (US)

Education Webinar

14 Jan 2021 - 2 min read

Identity governance that passes the test: Fastpath, ProofID and the University of Chichester

Customer Identity Workforce Identity Partner Identity Case Study Education
CONTACT US

Build Confidence into Your Security, Today and Tomorrow

Talk to the ProofID team today, and let’s explore the perfect-fit security solution for your organisation.

Contact us