Lumos, the identity management platform for the agentic era, announced the Identity Agent Force, a team of AI agents that continuously govern access across every human, machine, and AI agent in the enterprise. These agents, part of the new Agent Hub, include an Access Review Agent, an Access Request Agent, a Role Mining Agent, an Entitlement Analyst, an NHI Owner Hunter, and an Agent Ownership Finder, with more agents shipping throughout the year.
Attackers have agents now. With offensive models like Mythos, one attacker does the work of a hundred, running phishing, credential theft, and lateral movement faster than any human team can investigate. Simultaneously, defenders have more to protect than ever. Humans, non-human identities like service accounts and API keys, and a new workforce of AI agents all must be governed and secured.
Identity teams responsible for this critical work can’t succeed with traditional, human-centric identity tools. They are already drowning in tickets, reviews, and one-off requests, and the gap widens every quarter.
If attackers have agents, defenders need agents too. The Identity Agent Force gives enterprises fire to fight fire: an integrated team of agents that absorbs the manual work at machine speed, at massive scale, all in the background. Humans’ work becomes more important. Instead of pushing tickets, they encode the system with direction, strategy, and best practices.
Also Read: PhoenixAI Raises $80M Series B Led by Sky9 Capital to Power the Agentic AI Database
“AI is reshaping the enterprise faster than any technology before it, and traditional identity forces an untenable choice: move slow and die, or go fast and put the business at risk,” said Andrej Safundzic, CEO of Lumos. “Attackers aren’t waiting. They are using agents to attack businesses like never before. The Identity Agent Force gives defenders the same advantage with a team of agents that not only lets them fight back, but win.”
Agents do the work. Humans build the system.
Traditional identity platforms manage access through human workflows like requests, approvals, reviews, certifications. That model is periodic and manual. Access reviews happen quarterly while risk changes hourly. Engineers keep access years after they need it. Service accounts run critical workflows without clear owners. Least privilege stays a project that never finishes.
Most AI in identity today only makes that old workflow easier to talk to. A human still has to chase the issue, understand the context, and do the work.
The Identity Agent Force changes the operating model. Each agent runs continuously in the background, makes access decisions across every identity, and escalates only the exceptions that need human judgment. When a team needs more coverage, they deploy another agent from the Agent Hub.
SOURCE: PRNewswire