{"success":true,"data":{"pressRelease":{"id":"180409","rtpr_id":"nPn5kQ7Ha-20261027","ticker":"IBM","exchange":"NYSE","all_tickers":["IBM"],"title":"IBM Introduces Identity and Control for AI Agents, Securing Frontier Intelligence for the Enterprise","author":"PR Newswire","published_at":"2026-10-27T04:01:00.830Z","article_body":"IBM Introduces Identity and Control for AI Agents, Securing Frontier Intelligence for the Enterprise\nPR Newswire\n\nATLANTA, Oct. 27, 2026\n\n * Enterprises are deploying agents faster than they can verify\nthem. HashiCorp Vault uses Agent Identity to give each agent a governed\nidentity\n * Verified agents still need limits on access. Vault extends its established\nsecrets management to AI agents, built to enforce least-privilege access and\nenable real-time revocation when an agent attempts an unauthorized action\n * Enterprises can't scale agents they can't see, test or account for.\nIBM watsonx Orchestrate is designed to unify discovery, containment, and\nevaluation across Amazon Bedrock, Microsoft Foundry and Google Gemini\nATLANTA, Oct. 27, 2026 /PRNewswire/ -- At TechXchange 2026, IBM (NYSE: IBM)\nis announcing new capabilities to help developers, IT and security teams put\nAI agents to work across business systems with clear authority and\naccountability. IBM brings together agent discovery, verified identities,\naccess controls and performance evaluation to help organizations understand\nwho owns each agent, control what it can access, and trace its actions across\nexisting applications and infrastructure.\n\nAccording to Gartner\n(https://www.gartner.com/en/newsroom/press-releases/2026-04-28-gartner-identifies-six-steps-to-manage-artificial-intelligence-agent-sprawl)\n, by 2028 the average Fortune 500 enterprise will use over 150,000 AI agents.\nBut only 13% of organizations believe that they have the right AI agent\ngovernance in place [1]. Persistent credentials, unclear ownership and\ndisconnected controls make it harder to govern agents as they interact with\nother agents, invoke tools and act across teams, platforms and clouds.\n\n\"The winners in enterprise AI are changing how their business runs, not simply\nadding more AI to it,\" said Dinesh Nirmal, Senior Vice President, IBM\nSoftware. \"For agents to take on real work across the systems a company\ndepends on, it requires an AI operating model – one that connects agents to\nthe business's data, applications and infrastructure and runs them with the\nsame discipline as its most critical systems. Build trust and control into\nthat model, and agents stop being a technology and become a way of doing\nbusiness.\"\n\nToday's announcements extend IBM's portfolio to deliver an AI operating model\nof four essential systems working together: agents, data, automation and\nhybrid infrastructure. This starts with the trust and control every agent\nneeds – a verified identity, only the access it needs, and one place to\ndiscover, secure and evaluate agents regardless of where they were built.\n\nExtending HashiCorp Vault to AI agents\nHashiCorp Vault manages the secrets and credentials that applications and\nservices use to access business systems. It provides that control through\ncentrally managed secrets, automated rotation for supported credentials, and\ndynamically generated credentials that expire or can be revoked. These\ncapabilities help reduce the time exposed credentials remain usable and limit\naccess to the permissions configured for each role.\n\nHashiCorp Vault already secures non-human identities for organizations\nincluding ABN AMRO, Adobe, athenahealth, BBVA, BlackRock, Canva, Duke Energy,\nExpedia, London Stock Exchange, Starbucks, Swiss Federal Railways and Target,\nacross systems that process billions of dollars in transactions\n[2]. HashiCorp will now extend those capabilities to AI agents, issuing\nsecured, short-lived credentials that limit each agent to what it needs.\n\nEstablishing agent identity and accountability\nAI agents are a growing class of non-human identity, alongside applications\nand services. As they begin acting across business systems, enterprises need a\nclear record of who owns each agent and what authority it has been\ngranted. HashiCorp is combining governed agent identity with credential\ncontrols to help organizations delegate work with defined authority and\naccountability.\n\nWhen used with HashiCorp Vault, Agent Identity establishes the\nauthoritative record for each agent, such as who owns it, its\nlifecycle status and the authority it has been granted. Built to extend\nexisting identity and security investments, it shares relevant identity and\nauthorization context with Vault's credential\ncontrols – ultimately enforcing least-privilege access and enabling\nreal-time revocation when an agent attempts an unauthorized action.\n\nControlling agent credentials and access\nIdentifying an agent is only the start. Enterprises also need to control the\ncredentials it uses to reach databases, applications and cloud services –\nand how long those credentials remain valid. As agents invoke tools and act\nacross business systems, their credentials become a critical security\nboundary. An agent with a long-lived, overprivileged credential can put\nsystems and data at risk if it's compromised or acts outside its intended\ntask. Enterprises need to establish what each agent's job is, limit the\naccess it receives and revoke that access when circumstances change.\n\nThese controls extend beyond initial authentication. If an\nagent attempts to retrieve information or perform actions outside its\napproved permissions, the access can be denied and session revoked in real\ntime to prevent unauthorized activity. Vault's short-lived credentials and\nleast-privilege controls can further restrict what an agent accesses and the\nduration of those permissions.\n\nAdditional capabilities include:\n\n * Vault 2.2 gives agents their own secured accounts, automatically renews their\ncredentials and incorporates post-quantum encryption for quantum-era\nthreats.\n * Secure Hub (public preview) gives companies centralized visibility across\ntheir Vault environments to make it easier to understand operational\nhealth, usage and security resources.\nAt TechXchange, client speakers will share how they use Vault to secure\nenterprise applications, workloads and AI agents\n\n * athenahealth: Automating certificate management with Vault's PKI engine.\n * Albert Einstein College of Medicine: Applying IBM Verify and Vault to AI\nagent identity, just-in-time access, dynamic secrets and auditability.\n * Optum: Using Vault Radar to detect exposed secrets and Boundary for\njust-in-time, identity-based access.\n * Seven-Eleven Japan: Centralizing and encrypting secrets with Vault Enterprise\nand detecting hardcoded secrets with Vault Radar.\n * Yum! Brands: Building an identity security platform with IBM Verify, with a\nlook ahead to machine identities and secrets management.\n\"AI presents extraordinary opportunities to accelerate biomedical research and\ndiscovery, but realizing its potential requires a foundation of security,\ntrust, and responsible governance,\" said Shailesh M. Shenoy, Assistant Dean\nfor Information Technology at Albert Einstein College of Medicine. \"In my\nexperience, technologies such as IBM Verify and HashiCorp Vault can play an\nimportant role in helping organizations establish the identity, access, and\nsecurity controls needed to innovate with confidence.\"\n\nManaging agents across platforms\nIdentity tells organizations what an agent is. But they also need to see every\nagent they have, wherever it was built. IBM watsonx Orchestrate works\nacross the AI ecosystem, not inside a single vendor's platform, to give\norganizations one place to discover, secure and evaluate their\nagents. Capabilities include:\n\n * Discover (tech preview): Organizations can't govern agents\nthey don't know exist. Orchestrate connects to platforms such as Amazon\nBedrock, Microsoft Foundry and Google Gemini to find agents built in\nthird-party environments, so teams can see and manage agents instead of adding\nthem manually. This capability also extends to models and MCP servers.\n * Contain (tech preview): One rogue agent can disrupt others and spread\nmistakes across the business. Orchestrate now runs agents in isolated\nsandboxes so a rogue agent can't interfere with others. Teams also now have\naccess to a kill switch to shut down any agent.\n * Evaluate: Agents that aren't tested and tracked can quietly drift off\ncourse and increase costs. Teams using Orchestrate can now test the quality,\naccuracy and compliance of agents, models and MCP servers before deployment,\nthen monitor them in production. Built-in cost tracking shows each agent's\nmodel and token use, so teams can spot what's driving spend and fix it.\nOrchestrate also works with Vault's credential controls and Agent Identity\nto establish what each agent's job is, govern its authority and enforce\nleast-privilege credential access. Together, these controls help organizations\nauthorize and audit agent actions and rapidly revoke trust and credentials\nwhen risk changes.\n\nConnecting agents to the business\nOnce agents are authorized to use a company's APIs and tools, they need to\nknow what already exists, how systems connect, what can be reused safely and\nwhat their actions could affect. IBM Integration Intelligence Hub is built\nto provide that knowledge through its Unified Context Engine, so agents can\nfix problems like stuck messages or deploy an API using what's already in\nplace. Skills, approval policies and audit controls keep those actions in\ncheck. Instead of rebuilding for AI, organizations can put agents to work on\nthe systems they already depend on.\n\nScaling agents with NVIDIA\nAgent Identity and HashiCorp Vault integrate with NVIDIA OpenShell secure\nruntime software, the foundation of the NVIDIA OpenShell\n(https://nvidianews.nvidia.com/news/openshell-reference-architecture)\n Architecture\n(https://nvidianews.nvidia.com/news/openshell-reference-architecture) .\nTogether, they pair a protected environment for agents to run in with a\nverified identity and short-lived credentials for every agent, so each action\ncan be traced, limited and reviewed.\n\n\"Businesses need enforceable control over how agents operate and what they can\naccess,\" said John Fanelli, vice president, enterprise software, NVIDIA. \"Our\nwork with IBM combines NVIDIA OpenShell's policy-governed runtime with Agent\nIdentity and HashiCorp Vault to help enterprises scale AI agents with secure\nexecution, verified identities and tightly scoped access to business\nsystems.\"\n\nResponding to Emerging Security Threats\nWhen new vulnerabilities are discovered, enterprises must\nquickly identify affected systems, determine required changes and deploy\nfixes without disrupting critical operations. In complex environments, this\nprocess often involves multiple teams, tools and processes.\n\nIBM Concert integrates observability, optimization, incident management and\nsecurity across applications, infrastructure and networks. With AI-powered\ninsights and proof of exploitability, Concert helps teams\nto identify high-risk vulnerabilities, assess operational impact, and\ncoordinate responses. These capabilities also help organizations address\nperformance, manage costs and maintain resilience in hybrid\nenvironments.\n\nHashiCorp Terraform provides an infrastructure context and governed\nworkflows for change implementation. New features now generally available and\nin public preview, including Terraform policy, Terraform Developer Portal and\nTerraform remote MCP server, enable developers and AI agents to access\napproved configurations and implement infrastructure changes through\nestablished controls. Terraform powered by Infragraph also helps teams\nunderstand infrastructure relationships and dependencies for more informed\ndecisions.\n\nTogether, these capabilities enable organizations to progress\nfrom identifying vulnerabilities to implementing and verifying remediation,\nwhile optimizing the visibility and governance essential for enterprise\noperations.\n\nA comprehensive system intelligence and change orchestration layer for IBM Z\nIBM Z Atlas maps a client's entire z/OS stack across infrastructure,\nmiddleware, and applications, and then uses that intelligence to address the\nmanual effort of tasks like patch management, regulatory response, and sharing\nsystem knowledge across teams, from systems programmers to application\ndevelopers. Atlas addresses the leading cause of unplanned z/OS outages –\nchanges that aren't proven to be safe – by mapping how a\nchange impacts the z/OS stack and testing and validating it. This design\n(in tech preview) accelerates clients' modernization efforts by keeping\nexperts in control and giving practitioners, in operations or development, the\nsame shared Z system visibility to reduce risk.\n\nAvailability\nHashiCorp Vault 2.2, Agent Identity, watsonx Orchestrate evaluate\ncapabilities, IBM Concert, and HashiCorp Terraform policy are generally\navailable. Secure Hub, Terraform Developer Portal, Terraform remote MCP\nserver, and IBM Z Atlas are in public preview. IBM Integration Intelligence\nHub and watsonx Orchestrate discover and contain capabilities are in tech\npreview.\n\nStatements regarding IBM's future direction and intent are subject to change\nor withdrawal without notice and represent goals and objectives only.\n\nLearn more\nIBM TechXchange is IBM's annual conference for developers and technology\npractitioners and brings together nearly 6,500 attendees from 85 countries.\nThis year, the event incorporates HashiConf to bring together the HashiCorp\ncommunity with practitioners from across IBM, Red Hat and\nConfluent. Attendees can choose from more than 1,000 sessions and\nexperiences, including 180 hands-on labs, 260 client-led sessions and more\nthan 50 certification exams. Speakers include American Airlines, Bradesco,\nCiti, CVS Health, Deutsche Bank, DoorDash, Hertz, and US Bancorp who will\nshare how they are making AI enterprise ready.\n\nSession livestream and replays will be available\nhere: ibm.biz/txc26-livestream (http://ibm.biz/txc26-livestream) .\n\nSupporting Materials\n\n * Strengthen security for agentic AI with new Vault, Verify, Boundary, and\nSecure Hub capabilities\n(https://www.hashicorp.com/blog/strengthen-security-for-agentic-ai-with-new-vault-verify-boundary-and-secure-hub)\n\n \n * IBM Agent Identity now generally available: Building Trust for the Agentic Era\n(https://www.ibm.com/new/announcements/ibm-agent-identity-is-now-generally-available-building-trust-for-the-agentic-era)\n\n \n * Vault Enterprise 2.2 advances identity security, PKI, and cryptoagility\n(https://www.hashicorp.com/en/blog/vault-enterprise-advances-identity-security-pki-and-crypto-agility)\n\n \n * Announcing the public preview of Secure Hub: govern Vault at scale\n(https://www.hashicorp.com/blog/announcing-the-public-preview-of-hashicorp-secure-hub-govern-vault-at-scale)\n\n \n * IBM watsonx Orchestrate advances AI agent management with new capabilities\n(https://www.ibm.com/new/announcements/ibm-watsonx-orchestrate-advances-enterprise-ai-agent-management-with-new-capabilities-at-techxchange-2026)\n\n \n * IBM Integration Intelligence Hub gives AI the context to act, not just access\n(https://www.ibm.com/new/announcements/ibm-integration-intelligence-hub-gives-ai-the-context-to-act-not-just-access)\n\n \n * IBM Concert platform advances the path to cross-domain agentic IT operations\n(https://www.ibm.com/new/announcements/ibm-concert-platform-advances-the-path-to-cross-domain-agentic-it-operations)\n\n \n * Terraform advances infrastructure lifecycle management for the agentic era\n(https://www.ibm.com/new/announcements/terraform-advances-infrastructure-lifecycle-management-for-the-agentic-era)\n\n \n * Introducing IBM Z Atlas: Change Intelligence for IBM Z\n(https://www.ibm.com/new/announcements/navigating-complex-infrastructure-environment-change-with-confidence)\n\n \n[1]: Gartner Identifies Six Steps to Manage AI Agent Sprawl\n(https://www.gartner.com/en/newsroom/press-releases/2026-04-28-gartner-identifies-six-steps-to-manage-artificial-intelligence-agent-sprawl)\n\n[2]: HashiCorp Vault client stories\n(https://www.hashicorp.com/en/case-studies?products=Vault)\n\nAbout IBM\nIBM is a leading provider of global hybrid cloud and AI, and consulting\nexpertise. We help clients in more than 175 countries capitalize on insights\nfrom their data, streamline business processes, reduce costs and gain the\ncompetitive edge in their industries. Thousands of governments and corporate\nentities in critical infrastructure areas such as financial services,\ntelecommunications and healthcare rely on IBM's hybrid cloud platform and Red\nHat OpenShift to affect their digital transformations quickly, efficiently and\nsecurely. IBM's breakthrough innovations in AI, quantum computing,\nindustry-specific cloud solutions and consulting deliver open and flexible\noptions to our clients. All of this is backed by IBM's long-standing\ncommitment to trust, transparency, responsibility, inclusivity and service.\nVisit www.ibm.com (https://www.ibm.com/) for more information.\n\nMedia contacts:\n\nSarah Benchaita\nIBM\nsarah.benchaita@ibm.com (mailto:sarah.benchaita@ibm.com)\n\nKate Lehman\nIBM\nKate.Lehman@ibm.com (mailto:Kate.Lehman@ibm.com)\n\nView original content to download\nmultimedia:https://www.prnewswire.com/news-releases/ibm-introduces-identity-and-control-for-ai-agents-securing-frontier-intelligence-for-the-enterprise-302920156.html\n(https://www.prnewswire.com/news-releases/ibm-introduces-identity-and-control-for-ai-agents-securing-frontier-intelligence-for-the-enterprise-302920156.html)\n\nSOURCE IBM\n\n\n\nPhoto: \nhttps://mmx.prnewswire.com/media/MS2021384/TechXchange-banner_1920X1080.jpg?id=OA3040893\nhttps://mmx.prnewswire.com/media/MS654328/IBM-LOGO-1.jpg?id=OA3040892\n\nCopyright (c) 2026 PR Newswire Association,LLC. All Rights Reserved.","article_body_html":"","raw_payload":{"data":{"id":"nPn5kQ7Ha-20261027","title":"IBM Introduces Identity and Control for AI Agents, Securing Frontier Intelligence for the Enterprise","author":"PR Newswire","ticker":"IBM","created":"2026-10-27T04:01:00.830Z","tickers":["IBM"],"exchange":"NYSE","article_body":"IBM Introduces Identity and Control for AI Agents, Securing Frontier Intelligence for the Enterprise\nPR Newswire\n\nATLANTA, Oct. 27, 2026\n\n * Enterprises are deploying agents faster than they can verify\nthem. HashiCorp Vault uses Agent Identity to give each agent a governed\nidentity\n * Verified agents still need limits on access. Vault extends its established\nsecrets management to AI agents, built to enforce least-privilege access and\nenable real-time revocation when an agent attempts an unauthorized action\n * Enterprises can't scale agents they can't see, test or account for.\nIBM watsonx Orchestrate is designed to unify discovery, containment, and\nevaluation across Amazon Bedrock, Microsoft Foundry and Google Gemini\nATLANTA, Oct. 27, 2026 /PRNewswire/ -- At TechXchange 2026, IBM (NYSE: IBM)\nis announcing new capabilities to help developers, IT and security teams put\nAI agents to work across business systems with clear authority and\naccountability. IBM brings together agent discovery, verified identities,\naccess controls and performance evaluation to help organizations understand\nwho owns each agent, control what it can access, and trace its actions across\nexisting applications and infrastructure.\n\nAccording to Gartner\n(https://www.gartner.com/en/newsroom/press-releases/2026-04-28-gartner-identifies-six-steps-to-manage-artificial-intelligence-agent-sprawl)\n, by 2028 the average Fortune 500 enterprise will use over 150,000 AI agents.\nBut only 13% of organizations believe that they have the right AI agent\ngovernance in place [1]. Persistent credentials, unclear ownership and\ndisconnected controls make it harder to govern agents as they interact with\nother agents, invoke tools and act across teams, platforms and clouds.\n\n\"The winners in enterprise AI are changing how their business runs, not simply\nadding more AI to it,\" said Dinesh Nirmal, Senior Vice President, IBM\nSoftware. \"For agents to take on real work across the systems a company\ndepends on, it requires an AI operating model – one that connects agents to\nthe business's data, applications and infrastructure and runs them with the\nsame discipline as its most critical systems. Build trust and control into\nthat model, and agents stop being a technology and become a way of doing\nbusiness.\"\n\nToday's announcements extend IBM's portfolio to deliver an AI operating model\nof four essential systems working together: agents, data, automation and\nhybrid infrastructure. This starts with the trust and control every agent\nneeds – a verified identity, only the access it needs, and one place to\ndiscover, secure and evaluate agents regardless of where they were built.\n\nExtending HashiCorp Vault to AI agents\nHashiCorp Vault manages the secrets and credentials that applications and\nservices use to access business systems. It provides that control through\ncentrally managed secrets, automated rotation for supported credentials, and\ndynamically generated credentials that expire or can be revoked. These\ncapabilities help reduce the time exposed credentials remain usable and limit\naccess to the permissions configured for each role.\n\nHashiCorp Vault already secures non-human identities for organizations\nincluding ABN AMRO, Adobe, athenahealth, BBVA, BlackRock, Canva, Duke Energy,\nExpedia, London Stock Exchange, Starbucks, Swiss Federal Railways and Target,\nacross systems that process billions of dollars in transactions\n[2]. HashiCorp will now extend those capabilities to AI agents, issuing\nsecured, short-lived credentials that limit each agent to what it needs.\n\nEstablishing agent identity and accountability\nAI agents are a growing class of non-human identity, alongside applications\nand services. As they begin acting across business systems, enterprises need a\nclear record of who owns each agent and what authority it has been\ngranted. HashiCorp is combining governed agent identity with credential\ncontrols to help organizations delegate work with defined authority and\naccountability.\n\nWhen used with HashiCorp Vault, Agent Identity establishes the\nauthoritative record for each agent, such as who owns it, its\nlifecycle status and the authority it has been granted. Built to extend\nexisting identity and security investments, it shares relevant identity and\nauthorization context with Vault's credential\ncontrols – ultimately enforcing least-privilege access and enabling\nreal-time revocation when an agent attempts an unauthorized action.\n\nControlling agent credentials and access\nIdentifying an agent is only the start. Enterprises also need to control the\ncredentials it uses to reach databases, applications and cloud services –\nand how long those credentials remain valid. As agents invoke tools and act\nacross business systems, their credentials become a critical security\nboundary. An agent with a long-lived, overprivileged credential can put\nsystems and data at risk if it's compromised or acts outside its intended\ntask. Enterprises need to establish what each agent's job is, limit the\naccess it receives and revoke that access when circumstances change.\n\nThese controls extend beyond initial authentication. If an\nagent attempts to retrieve information or perform actions outside its\napproved permissions, the access can be denied and session revoked in real\ntime to prevent unauthorized activity. Vault's short-lived credentials and\nleast-privilege controls can further restrict what an agent accesses and the\nduration of those permissions.\n\nAdditional capabilities include:\n\n * Vault 2.2 gives agents their own secured accounts, automatically renews their\ncredentials and incorporates post-quantum encryption for quantum-era\nthreats.\n * Secure Hub (public preview) gives companies centralized visibility across\ntheir Vault environments to make it easier to understand operational\nhealth, usage and security resources.\nAt TechXchange, client speakers will share how they use Vault to secure\nenterprise applications, workloads and AI agents\n\n * athenahealth: Automating certificate management with Vault's PKI engine.\n * Albert Einstein College of Medicine: Applying IBM Verify and Vault to AI\nagent identity, just-in-time access, dynamic secrets and auditability.\n * Optum: Using Vault Radar to detect exposed secrets and Boundary for\njust-in-time, identity-based access.\n * Seven-Eleven Japan: Centralizing and encrypting secrets with Vault Enterprise\nand detecting hardcoded secrets with Vault Radar.\n * Yum! Brands: Building an identity security platform with IBM Verify, with a\nlook ahead to machine identities and secrets management.\n\"AI presents extraordinary opportunities to accelerate biomedical research and\ndiscovery, but realizing its potential requires a foundation of security,\ntrust, and responsible governance,\" said Shailesh M. Shenoy, Assistant Dean\nfor Information Technology at Albert Einstein College of Medicine. \"In my\nexperience, technologies such as IBM Verify and HashiCorp Vault can play an\nimportant role in helping organizations establish the identity, access, and\nsecurity controls needed to innovate with confidence.\"\n\nManaging agents across platforms\nIdentity tells organizations what an agent is. But they also need to see every\nagent they have, wherever it was built. IBM watsonx Orchestrate works\nacross the AI ecosystem, not inside a single vendor's platform, to give\norganizations one place to discover, secure and evaluate their\nagents. Capabilities include:\n\n * Discover (tech preview): Organizations can't govern agents\nthey don't know exist. Orchestrate connects to platforms such as Amazon\nBedrock, Microsoft Foundry and Google Gemini to find agents built in\nthird-party environments, so teams can see and manage agents instead of adding\nthem manually. This capability also extends to models and MCP servers.\n * Contain (tech preview): One rogue agent can disrupt others and spread\nmistakes across the business. Orchestrate now runs agents in isolated\nsandboxes so a rogue agent can't interfere with others. Teams also now have\naccess to a kill switch to shut down any agent.\n * Evaluate: Agents that aren't tested and tracked can quietly drift off\ncourse and increase costs. Teams using Orchestrate can now test the quality,\naccuracy and compliance of agents, models and MCP servers before deployment,\nthen monitor them in production. Built-in cost tracking shows each agent's\nmodel and token use, so teams can spot what's driving spend and fix it.\nOrchestrate also works with Vault's credential controls and Agent Identity\nto establish what each agent's job is, govern its authority and enforce\nleast-privilege credential access. Together, these controls help organizations\nauthorize and audit agent actions and rapidly revoke trust and credentials\nwhen risk changes.\n\nConnecting agents to the business\nOnce agents are authorized to use a company's APIs and tools, they need to\nknow what already exists, how systems connect, what can be reused safely and\nwhat their actions could affect. IBM Integration Intelligence Hub is built\nto provide that knowledge through its Unified Context Engine, so agents can\nfix problems like stuck messages or deploy an API using what's already in\nplace. Skills, approval policies and audit controls keep those actions in\ncheck. Instead of rebuilding for AI, organizations can put agents to work on\nthe systems they already depend on.\n\nScaling agents with NVIDIA\nAgent Identity and HashiCorp Vault integrate with NVIDIA OpenShell secure\nruntime software, the foundation of the NVIDIA OpenShell\n(https://nvidianews.nvidia.com/news/openshell-reference-architecture)\n Architecture\n(https://nvidianews.nvidia.com/news/openshell-reference-architecture) .\nTogether, they pair a protected environment for agents to run in with a\nverified identity and short-lived credentials for every agent, so each action\ncan be traced, limited and reviewed.\n\n\"Businesses need enforceable control over how agents operate and what they can\naccess,\" said John Fanelli, vice president, enterprise software, NVIDIA. \"Our\nwork with IBM combines NVIDIA OpenShell's policy-governed runtime with Agent\nIdentity and HashiCorp Vault to help enterprises scale AI agents with secure\nexecution, verified identities and tightly scoped access to business\nsystems.\"\n\nResponding to Emerging Security Threats\nWhen new vulnerabilities are discovered, enterprises must\nquickly identify affected systems, determine required changes and deploy\nfixes without disrupting critical operations. In complex environments, this\nprocess often involves multiple teams, tools and processes.\n\nIBM Concert integrates observability, optimization, incident management and\nsecurity across applications, infrastructure and networks. With AI-powered\ninsights and proof of exploitability, Concert helps teams\nto identify high-risk vulnerabilities, assess operational impact, and\ncoordinate responses. These capabilities also help organizations address\nperformance, manage costs and maintain resilience in hybrid\nenvironments.\n\nHashiCorp Terraform provides an infrastructure context and governed\nworkflows for change implementation. New features now generally available and\nin public preview, including Terraform policy, Terraform Developer Portal and\nTerraform remote MCP server, enable developers and AI agents to access\napproved configurations and implement infrastructure changes through\nestablished controls. Terraform powered by Infragraph also helps teams\nunderstand infrastructure relationships and dependencies for more informed\ndecisions.\n\nTogether, these capabilities enable organizations to progress\nfrom identifying vulnerabilities to implementing and verifying remediation,\nwhile optimizing the visibility and governance essential for enterprise\noperations.\n\nA comprehensive system intelligence and change orchestration layer for IBM Z\nIBM Z Atlas maps a client's entire z/OS stack across infrastructure,\nmiddleware, and applications, and then uses that intelligence to address the\nmanual effort of tasks like patch management, regulatory response, and sharing\nsystem knowledge across teams, from systems programmers to application\ndevelopers. Atlas addresses the leading cause of unplanned z/OS outages –\nchanges that aren't proven to be safe – by mapping how a\nchange impacts the z/OS stack and testing and validating it. This design\n(in tech preview) accelerates clients' modernization efforts by keeping\nexperts in control and giving practitioners, in operations or development, the\nsame shared Z system visibility to reduce risk.\n\nAvailability\nHashiCorp Vault 2.2, Agent Identity, watsonx Orchestrate evaluate\ncapabilities, IBM Concert, and HashiCorp Terraform policy are generally\navailable. Secure Hub, Terraform Developer Portal, Terraform remote MCP\nserver, and IBM Z Atlas are in public preview. IBM Integration Intelligence\nHub and watsonx Orchestrate discover and contain capabilities are in tech\npreview.\n\nStatements regarding IBM's future direction and intent are subject to change\nor withdrawal without notice and represent goals and objectives only.\n\nLearn more\nIBM TechXchange is IBM's annual conference for developers and technology\npractitioners and brings together nearly 6,500 attendees from 85 countries.\nThis year, the event incorporates HashiConf to bring together the HashiCorp\ncommunity with practitioners from across IBM, Red Hat and\nConfluent. Attendees can choose from more than 1,000 sessions and\nexperiences, including 180 hands-on labs, 260 client-led sessions and more\nthan 50 certification exams. Speakers include American Airlines, Bradesco,\nCiti, CVS Health, Deutsche Bank, DoorDash, Hertz, and US Bancorp who will\nshare how they are making AI enterprise ready.\n\nSession livestream and replays will be available\nhere: ibm.biz/txc26-livestream (http://ibm.biz/txc26-livestream) .\n\nSupporting Materials\n\n * Strengthen security for agentic AI with new Vault, Verify, Boundary, and\nSecure Hub capabilities\n(https://www.hashicorp.com/blog/strengthen-security-for-agentic-ai-with-new-vault-verify-boundary-and-secure-hub)\n\n \n * IBM Agent Identity now generally available: Building Trust for the Agentic Era\n(https://www.ibm.com/new/announcements/ibm-agent-identity-is-now-generally-available-building-trust-for-the-agentic-era)\n\n \n * Vault Enterprise 2.2 advances identity security, PKI, and cryptoagility\n(https://www.hashicorp.com/en/blog/vault-enterprise-advances-identity-security-pki-and-crypto-agility)\n\n \n * Announcing the public preview of Secure Hub: govern Vault at scale\n(https://www.hashicorp.com/blog/announcing-the-public-preview-of-hashicorp-secure-hub-govern-vault-at-scale)\n\n \n * IBM watsonx Orchestrate advances AI agent management with new capabilities\n(https://www.ibm.com/new/announcements/ibm-watsonx-orchestrate-advances-enterprise-ai-agent-management-with-new-capabilities-at-techxchange-2026)\n\n \n * IBM Integration Intelligence Hub gives AI the context to act, not just access\n(https://www.ibm.com/new/announcements/ibm-integration-intelligence-hub-gives-ai-the-context-to-act-not-just-access)\n\n \n * IBM Concert platform advances the path to cross-domain agentic IT operations\n(https://www.ibm.com/new/announcements/ibm-concert-platform-advances-the-path-to-cross-domain-agentic-it-operations)\n\n \n * Terraform advances infrastructure lifecycle management for the agentic era\n(https://www.ibm.com/new/announcements/terraform-advances-infrastructure-lifecycle-management-for-the-agentic-era)\n\n \n * Introducing IBM Z Atlas: Change Intelligence for IBM Z\n(https://www.ibm.com/new/announcements/navigating-complex-infrastructure-environment-change-with-confidence)\n\n \n[1]: Gartner Identifies Six Steps to Manage AI Agent Sprawl\n(https://www.gartner.com/en/newsroom/press-releases/2026-04-28-gartner-identifies-six-steps-to-manage-artificial-intelligence-agent-sprawl)\n\n[2]: HashiCorp Vault client stories\n(https://www.hashicorp.com/en/case-studies?products=Vault)\n\nAbout IBM\nIBM is a leading provider of global hybrid cloud and AI, and consulting\nexpertise. We help clients in more than 175 countries capitalize on insights\nfrom their data, streamline business processes, reduce costs and gain the\ncompetitive edge in their industries. Thousands of governments and corporate\nentities in critical infrastructure areas such as financial services,\ntelecommunications and healthcare rely on IBM's hybrid cloud platform and Red\nHat OpenShift to affect their digital transformations quickly, efficiently and\nsecurely. IBM's breakthrough innovations in AI, quantum computing,\nindustry-specific cloud solutions and consulting deliver open and flexible\noptions to our clients. All of this is backed by IBM's long-standing\ncommitment to trust, transparency, responsibility, inclusivity and service.\nVisit www.ibm.com (https://www.ibm.com/) for more information.\n\nMedia contacts:\n\nSarah Benchaita\nIBM\nsarah.benchaita@ibm.com (mailto:sarah.benchaita@ibm.com)\n\nKate Lehman\nIBM\nKate.Lehman@ibm.com (mailto:Kate.Lehman@ibm.com)\n\nView original content to download\nmultimedia:https://www.prnewswire.com/news-releases/ibm-introduces-identity-and-control-for-ai-agents-securing-frontier-intelligence-for-the-enterprise-302920156.html\n(https://www.prnewswire.com/news-releases/ibm-introduces-identity-and-control-for-ai-agents-securing-frontier-intelligence-for-the-enterprise-302920156.html)\n\nSOURCE IBM\n\n\n\nPhoto: \nhttps://mmx.prnewswire.com/media/MS2021384/TechXchange-banner_1920X1080.jpg?id=OA3040893\nhttps://mmx.prnewswire.com/media/MS654328/IBM-LOGO-1.jpg?id=OA3040892\n\nCopyright (c) 2026 PR Newswire Association,LLC. All Rights Reserved."},"type":"article","timestamp":"2026-10-27T04:01:00.878697349Z","server_sent_at_ms":1793073660878},"received_at":"2026-10-27T04:01:00.946Z","source_url":"https://www.prnewswire.com/news-releases/ibm-introduces-identity-and-control-for-ai-agents-securing-frontier-intelligence-for-the-enterprise-302920156.html"},"analysis":null,"durationMs":null,"modelName":null}}