--- title: "TAG" source: "https://wordpress-1075849-4005834.cloudwaysapps.com/tigera-products/tigera-agent-governance/" --- For Security & AI Teams ![Lynx](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/06/lynx-black.svg) # AI Agent Governance Platform ## Your AI agents are making decisions. Do you know what they're authorized to do? The platform for AI agent discovery, identity, authorization, and runtime enforcement for every agent in your organization, wherever they run. **Guardrails, not gates**. [Request Early Access](https://www.tigera.io/contact-tigera-agent-governance) [Read Our Whitepaper](https://info.tigera.io/rs/805-GFH-732/images/Whitepaper_Accountability_for_AI_Agents.pdf?version=0) ## Unified control across teams ### For Security Leaders - Complete visibility into every agent, shadow agents too - Zero-trust authorization enforced before every action - Full audit trail for compliance and incident response ### For AI Teams - Deploy agents faster with built-in governance - Real-time enforcement without blocking workflows - Break Glass for instant response when needed Problem ## AI agents are proliferating faster than your ability to govern them. Enterprises are rapidly deploying AI agents to automate workflows and accelerate decision-making. But agents don’t stay neatly inside your infrastructure — they run across hybrid cloud environments, multiple toolchains, and local machines. The result is **agent sprawl**, introducing three governance challenges that current security models cannot address: ### What a control plane for agents must do: ![One place that says what each agent can do](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/tag-problem-icon1.svg) ### One place that says what each agent can do *Agents reach for any tool, LLM, or agent and read untrusted input* **What you need:** One place that says what each agent can do. Policy-driven, applied at every call. ![A way to watch what agents actually do](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/tag-problem-icon1.svg) ### A way to watch what agents actually do *A valid credential does not guarantee good behavior* **What you need:** Detect anomalies: quarantine the ones going wrong. ![Authentication & authorization on every hop](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/tag-problem-icon2.svg) ### Authentication & authorization on every hop *Every action is a delegation chain: User->agent->agent->Tool.* **What you need:** JWT Tokens scoped, time-bound, carrying the chain. ![Continuous posture assessment and sandboxing](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/tag-problem-icon3.svg) ### Continuous posture assessment and sandboxing *Blast radius moves as new agents and tools come online* **What you need:** Test the posture; sandbox new agents on the way in **Current security models don't work with AI agents.** Solution ## Guardrails, not gates. Governance that enables your AI teams to move fast — safely. TAG is a cloud-native enforcement layer purpose-built for autonomous agents. It sits in the middle of all agentic traffic to discover, authenticate, authorize, and observe every agent action in real time. ***Every agent** is known. **Every identity** is verified. **Every action** is authorized before it happens. **Every interaction** is traceable.* Capabilities ### Everything you need to govern AI agents at enterprise scale. Universal Discovery & Registry Know every agent, registered and shadow alike ![Universal Discovery & Registry](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/Universal-Discovery-and-Registry.png) Identity & Authentication Cryptographic agent identity that eliminates shared secrets ![Identity & Authentication](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/Identity-and-Authentication.png) Authorization & Access Control Zero-trust authorization before every agent action ![Authorization & Access Control](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/Authorization-and-Access-Control.png) Runtime Policy Enforcement ![Runtime Policy Enforcement](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/Runtime-Policy-Enforcement.png) Observability & Audit ![Observability & Audit](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/Observability-and-Audit.png) Know every agent before they do something they shouldn't. ### Central Registry A structured directory for your agentic workforce that catalogues owner, purpose, version, and context for every agent with full lifecycle management APIs ### Auto-Discovery Automatically discovers shadow agents using heuristics and eBPF — no manual inventory required ### Shadow Agent Detection Identifies agents operating outside official registration before they become incidents ### Full Lifecycle Management Tracks agents from deployment through decommission with version history and ownership attribution Every agent needs a verified identity. Not a shared API key. ### Cryptographic Identity Uses SPIFFE/SPIRE or your existing identity provider to issue verifiable, short-lived cryptographic identities (SVIDs) to every agent ### No Shared Secrets Eliminates long-lived API keys with automatically rotated tokens (TTL ~10 minutes), significantly reducing attack surface ### Chain of Custody Tracks "On-Behalf-Of" delegation chains — always know whether an agent is acting autonomously or on behalf of a human user ### IDP Integration Works with Microsoft Entra ID and existing identity providers — no rip-and-replace required Fine-grained authorization for every agent interaction before it happens. ### Tool Binding Restrict which MCP servers or tools an agent can access at the individual tool level ### Fine-Grained Access Control Define permissions using multiple attributes: agent identity, service, namespace, data class, operation type, time of day, and more ### Default Deny Model Every agent interaction starts from denial. Agents act only on explicit authorization — never implicit trust ### Contextual Authorization *"Agent A can read CRM data but cannot export it. Agent B can read CRM data for users in the EMEA region during business hours only"* Guardrails, not gates. Enforcement that doesn't slow your AI teams down. ### Real-Time Enforcement Policy evaluated and enforced before every data access, tool call, or service invocation — automatically, without human intervention ### Break Glass Controls Immediately revoke or quarantine a rogue agent; instant response without waiting for a manual process ### Centralized Administration Policies defined centrally and enforced consistently across every environment where agents run ### Distributed Enforcement Points Deploy across on-premises, cloud, and edge under a unified control plane ### CI/CD Integration Register agents and define policies as part of your existing pipeline — governance built in from the start See everything. Trace every action. Prove it to the auditor. ### Service Graph Real-time visual map of agent-to-agent and agent-to-tool interactions. Surface dependencies and anomalous behavior before they become incidents ### Audit Lineage Full trace of Agent → Decision → Tool → Data for compliance reporting, operational debugging, and forensic investigation ### OpenTelemetry Standard Exports telemetry in OTEL format. Compatible with your existing observability stack ### Seamless Integration Native integrations with Datadog, Splunk, and Prometheus ### Compliance Framework Support Designed to support SOC 2, ISO 27001, NIST AI RMF, and GDPR requirements, with audit trails and policy enforcement records that map directly to regulatory reporting needs DEPLOYMENT OPTIONS ## Two ways to deploy. One governance standard. TAG meets you where your agents are. Option 1 ### Self-hosted Option A Kubernetes-native gateway deployed in your cluster, sitting in the middle of all agentic traffic and enforcing policy at runtime. Control and data plane fully managed by you. **Best for:** Kubernetes-native agent deployments requiring full control over data residency. Option 2 ### SaaS Option A SaaS solution to provide governance and observability for agents, no matter where they are running. **Best for:** Organizations needing rapid visibility across their agent estate before deploying runtime enforcement. Why TIGERA? ## Tigera is defining the AI Agent Governance category. We’ve spent a decade enforcing policy for cloud-native workloads at the world’s most demanding organizations — **8 million+ nodes, 1 million+ clusters**. The same enforcement rigor and policy framework powering Calico Platform is now available for AI agents. ![Proven Policy Foundation icon](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/why-tigera-icon4.svg) ### Proven Policy Foundation The enforcement engine behind Tigera Agent Governance secures 8M+ Kubernetes nodes daily. Enterprise-proven at the most demanding scale. ![Purpose-Built for Agents icon](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/why-tigera-icon6.svg) ### Purpose-Built for Agents Not IAM stretched to cover agents. Not CASB repurposed for a new problem. Built from the ground up for autonomous, non-deterministic, distributed AI agents. ![Guardrails, Not Gates icon](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/why-tigera-icon7.svg) ### Guardrails, Not Gates Real-time enforcement that enables AI teams to move fast — not a bureaucratic control layer that creates bottlenecks and drives workarounds. ![Enterprise Expertise icon](https://wordpress-1075849-4005834.cloudwaysapps.com/app/uploads/2026/03/why-tigera-icon8.svg) ### Enterprise Expertise A decade alongside NVIDIA, RBC, Bloomberg, Discover, and many more. That accumulated knowledge ships with every product we build. ## Resources Practitioner-built resources for governing AI agents on Kubernetes. [Whitepaper Securing AI Agents on Kubernetes using Tigera Lynx Guide ### Securing AI Agents on Kubernetes using Tigera Lynx How to give autonomous AI agents identity, authorization and enforceable network policy on Kubernetes — without slowing delivery. Read the Whitepaper](https://www.tigera.io/lp/whitepaper-securing-ai-agents-on-kubernetes-using-tigera-lynx/) [Blog ### How Lynx Works: A Technical Walkthrough A walkthrough of the Lynx architecture — agent identity, policy evaluation and the enforcement path through the cluster. Read More](https://www.tigera.io/blog/how-lynx-works-a-technical-walkthrough/) [Webinar ### Lynx Launch Event Watch the launch: why Tigera built Lynx, a live product demo, and what accountable AI agent networks look like in practice. Watch the Launch Event](https://tigera.wistia.com/s/c37h9qyaiz1ysjv/?utm_source=website&utm_medium=video&utm_campaign=lynx_launchFY27) ## AI agents are already making decisions in your organization. Are they authorized to? Tigera Agent Governance gives security and AI teams the visibility, authorization, and governance controls to deploy AI agents safely, anywhere in your organization, at enterprise scale.