Varonis Launches Agent IBAC to Constrain AI Agent Actions at Runtime
Varonis has released Agent Intent-Based Access Control (IBAC) within its Atlas platform, a runtime enforcement layer that compares an AI agent's received instructions against its actual tool calls and data access to detect and block out-of-policy behaviour. While the capability is a defensive control, its deployment introduces new attack surface: adversaries who understand the intent-matching logic may craft prompt injections or instruction manipulation that causes the agent's declared intent to align with a malicious action, bypassing the guardrail. Security teams should treat Agent IBAC as a layer within a defence-in-depth strategy rather than a standalone control, and test it aggressively against adversarial prompt scenarios before trusting it in production.