A vocabulary for agent-era security

The risks are new.
The words are missing.

Six terms every enterprise security team needs to know — before they deploy their first agent.

The principle that's failing

Least Privileged Access — the foundation of enterprise security.

Tight, structured, APILoose, multi-modal, agents

It breaks down for AI agents.

01 / 06 · Opacity

noun · nobody can say what the agent will do

The same agent behaves differently every run — inputs shift, the model decides. Nothing to review.

Ask what this agent may do, and there is no document to point at.

02 / 06 · Drift

noun · the failure mode unique to LLM-driven agents

When the reasoning layer goes off-mission — taking credentials, authority, and data with it.

A single prompt injection redirects an agent to an attacker-controlled URL. No allow-list catches it; the agent chose to go there.

03 / 06 · Sprawl

noun · a permanent audit liability

Every agent pre-loaded with every critical asset it might need — from minute one.

OAuth tokens, API keys, OS credentials, vault entries — all duplicated across hundreds of agents, all subject to regulatory review.

04 / 06 · Decay

noun · what happens when static IAM meets a dynamic agent

Allow-lists, scopes, and role policies were designed for fixed APIs. Agents don't have any.

The same policy fails open or fails closed depending on which path the LLM picks this turn.

05 / 06 · Gap

noun · the absence of a per-turn audit trail

Today's audit tools log what happened. Agent security needs to know why.

When an agent makes a thousand decisions per workflow, "the access log shows the call succeeded" is no longer a sufficient answer.

06 / 06 · Shadow

noun · cousin to shadow IT — but autonomous

Agents spun up by individual teams, credentialed out-of-band, running outside the security perimeter.

You don't even know they exist. Until something goes wrong.

The antidote

For every word on the left,
ZModal writes a word on the right.

Opacity, drift, sprawl, decay, gap and shadow aren't permanent conditions of working with agents.
They're symptoms of running them without a control plane.

The principle — restored

Least Privileged Access — for the agentic enterprise.

Tight, structured, APILoose, multi-modal, agents — protected

Every agent. Every turn. Every tenant.

The ZModal lexicon.

opacity

becomes

The workflow mapDrawn before the agent's first run

drift

becomes

Intent-aware agentic firewallMission & budget enforced at egress

sprawl

becomes

Critical assets off the agentThe agent holds a fake, never the key

decay

becomes

Policy that moves with the runEnforced per step, not per fixed API

gap

becomes

Tamper-proof per-turn recordEvery prompt, every rail, every decision

shadow

becomes

Per-tenant attributionEvery agent in the enterprise, visible

The risks are new.The words are missing.

Least Privileged Access — the foundation of enterprise security.

For every word on the left,ZModal writes a word on the right.

Least Privileged Access — for the agentic enterprise.

The ZModal lexicon.

The risks are new.
The words are missing.

For every word on the left,
ZModal writes a word on the right.