AI Agents, Identity, and the Security Gap

AI agents create a different security problem from traditional software. They can operate at software speed and scale while behaving in ways that are much less predictable. Ev Kontsevoy, CEO and cofounder of Teleport, joins The Tech Trek to discuss what happens when companies deploy agents into security systems designed around humans, applications, and relatively static organizational structures. The conversation gets into authentication, impersonation, infrastructure identity, access control, and a harder question: what actually defines the identity of an AI agent when its model, memory, skills, and capabilities can change? Ev also explains why the combination of speed, scale, and unpredictable behavior changes the risk of mistakes. Later, he explores the tension between agents being useful because they can do new things and security systems that often depend on predictable behavior. Key takeaways • Agent identity gets harder when memory, models, and capabilities can change. • Traditional access controls often reflect static organizational structures. • Agents combine software speed with behavior that can be difficult to predict. • Useful agent behavior can conflict with security systems built around anomaly detection. Highlights 00:41 What Teleport does and why infrastructure identity matters 08:37 Why companies may already be behind on agent security 13:47 Why an electronic account is not the same as identity 15:11 What actually defines the identity of an AI agent? 22:49 Why agent speed and unpredictability change the risk equation 29:04 The conflict between useful agent behavior and anomaly detection One Line That Stuck “Agents are just as unpredictable as humans, but they are way, way, way faster.” Follow The Tech Trek for more conversations with the people building and leading technology companies.