--- title: Varonis Agent IBAC keeps AI agents within their intended... description: Varonis has launched Agent IBAC (Intent-Based Access Control), a new capability in its Atlas platform designed to keep AI agents within their intended... canonical: https://daily.dev/posts/varonis-agent-ibac-keeps-ai-agents-within-their-intended-boundaries-2qviz23yw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Varonis Agent IBAC keeps AI agents within their intended boundaries | daily.dev og:description: Varonis has launched Agent IBAC (Intent-Based Access Control), a new capability in its Atlas platform designed to keep AI agents within their intended... og:url: https://daily.dev/posts/varonis-agent-ibac-keeps-ai-agents-within-their-intended-boundaries-2qviz23yw og:image: https://api.daily.dev/og/posts/2qviZ23YW.png og:image:alt: Varonis Agent IBAC keeps AI agents within their intended boundaries og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Varonis Agent IBAC keeps AI agents within their intended boundaries **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 7 min read · 1 upvotes · 0 comments ## Summary Varonis has launched Agent IBAC (Intent-Based Access Control), a new capability in its Atlas platform designed to keep AI agents within their intended operational boundaries. Unlike traditional role-based access controls, Agent IBAC evaluates every agent action against the original instruction in real time, detecting 'intent drift' — when an agent's behavior diverges from what the user requested. Key features include tunable intent drift detection with lenient/balanced/strict sensitivity levels, full-session evaluation to catch gradual drift and multi-turn jailbreak attempts, runtime guardrails (alert, block, modify, log, or human-in-the-loop approval), identity quarantine for serious violations, and a complete audit trail. Atlas sits inline between the agent and the underlying model, enabling enforcement before actions execute rather than after the fact. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is Agent IBAC in Varonis Atlas and how does it work? Agent IBAC is an Intent-Based Access Control capability in Varonis Atlas that compares an AI agent's given instruction against its actual reasoning, tool calls, and data access in real time, flagging or blocking actions that drift from intent. It sits inline between the agent and its underlying model so every prompt, response, and tool call passes through it before execution, evaluates full sessions (not single actions) to catch gradual drift and multi-turn jailbreaks, and supports responses like alert, block, modify, log, human-in-the-loop approval, or quarantining the identity for a set window. _Teams evaluating runtime controls for agentic AI risk can follow developments like this on daily.dev._ ### How does traditional role-based access control fall short for AI agents? Role-based access control was built to judge whether a user can access data, not whether a non-human identity's specific action in context is appropriate, so it cannot stop an agent that has valid access but uses it in unintended ways, such as elevating its own privileges or calling tools beyond the original request. Varonis argues permissions for agents must instead be enforced dynamically at runtime based on intent, not just static roles. _Developers weighing access-control approaches for autonomous agents can track this shift on daily.dev._ ## Similar posts on daily.dev - [How Varonis Atlas integrates Claude Compliance API for AI governance](https://daily.dev/posts/how-varonis-atlas-integrates-claude-compliance-api-for-ai-governance-eeg1zt9qy) · BleepingComputer · 0 upvotes · 0 comments - [Lattice-Based Identity and Access Management for AI Agents](https://daily.dev/posts/lattice-based-identity-and-access-management-for-ai-agents-naxbc4wfr) · Security Boulevard · 2 upvotes · 0 comments - [Build zero-trust AI agents that judge intent, not just syntax](https://daily.dev/posts/build-zero-trust-ai-agents-that-judge-intent-not-just-syntax-djk2mksfw) · Google Developers · 1 upvotes · 0 comments - [5 Ways Agentic AI Can Act Unpredictably](https://daily.dev/posts/5-ways-agentic-ai-can-act-unpredictably-0p2zlv5ka) · Nordic APIs · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/varonis-agent-ibac-keeps-ai-agents-within-their-intended-boundaries-2qviz23yw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Varonis Agent IBAC keeps AI agents within their intended boundaries","url":"https://daily.dev/posts/varonis-agent-ibac-keeps-ai-agents-within-their-intended-boundaries-2qviz23yw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/varonis-agent-ibac-keeps-ai-agents-within-their-intended-boundaries-2qviz23yw"},"datePublished":"2026-08-04T14:12:01.458Z","dateModified":"2026-09-13T20:44:07.694Z","description":"Varonis has launched Agent IBAC (Intent-Based Access Control), a new capability in its Atlas platform designed to keep AI agents within their intended...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b2ad565d09c7f895d37d679c4dcb330c?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b2ad565d09c7f895d37d679c4dcb330c?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/varonis-agent-ibac-keeps-ai-agents-within-their-intended-boundaries-2qviz23yw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,ai-security","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"Varonis Agent IBAC keeps AI agents within their intended boundaries"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/varonis-agent-ibac-keeps-ai-agents-within-their-intended-boundaries-2qviz23yw#faq","mainEntity":[{"@type":"Question","name":"What is Agent IBAC in Varonis Atlas and how does it work?","acceptedAnswer":{"@type":"Answer","text":"Agent IBAC is an Intent-Based Access Control capability in Varonis Atlas that compares an AI agent's given instruction against its actual reasoning, tool calls, and data access in real time, flagging or blocking actions that drift from intent. It sits inline between the agent and its underlying model so every prompt, response, and tool call passes through it before execution, evaluates full sessions (not single actions) to catch gradual drift and multi-turn jailbreaks, and supports responses like alert, block, modify, log, human-in-the-loop approval, or quarantining the identity for a set window. Teams evaluating runtime controls for agentic AI risk can follow developments like this on daily.dev."}},{"@type":"Question","name":"How does traditional role-based access control fall short for AI agents?","acceptedAnswer":{"@type":"Answer","text":"Role-based access control was built to judge whether a user can access data, not whether a non-human identity's specific action in context is appropriate, so it cannot stop an agent that has valid access but uses it in unintended ways, such as elevating its own privileges or calling tools beyond the original request. Varonis argues permissions for agents must instead be enforced dynamically at runtime based on intent, not just static roles. Developers weighing access-control approaches for autonomous agents can track this shift on daily.dev."}}]} ```