Okta and Blueprint Alliance Drive Interoperable AI Security Standards

Okta Inc. is leading a push for cross-industry collaboration to standardize security controls for agentic AI, a challenge that enterprises increasingly view as too complex for single-vendor solutions. The company, alongside founding members of the Blueprint Alliance, is advocating for interoperable safeguards as businesses navigate the risks of autonomous systems.

Okta Pushes for Cross-Industry Collaboration on AI Security

Okta Inc. is positioning agentic AI security as a challenge requiring cross-industry collaboration, not just isolated vendor solutions. According to SiliconANGLE, the rise of autonomous systems operating across multiple platforms has made it difficult for enterprises to rely on single-vendor security controls.

Charlotte Wylie, Senior Vice President and Deputy Chief Security Officer at Okta, emphasized the need for industry-wide coordination during discussions at the Oktane event. She noted that the goal is to create a unified approach that extends beyond security teams and reaches broader stakeholders within organizations.

Wylie reportedly expressed hope that attendees would leave the event with a clear understanding of how to implement these safeguards across their systems.

Blueprint Alliance Seeks Interoperable Security Standards

To address these challenges, Okta has partnered with Amazon Web Services Inc., CrowdStrike Holdings Inc., Salesforce Inc., and ServiceNow Inc. to form the Blueprint Alliance. The alliance aims to standardize security controls and risk signals across agentic AI systems, according to SiliconANGLE.

The proposed security architecture involves three key principles: assigning a unique identity to each AI agent, limiting its permissions, and providing visibility into its behavior to detect anomalies. This approach adapts traditional identity and access management (IAM) practices for machine-driven systems.

Okta has also introduced an AI agent runtime gateway and a product called Okta for AI Agents, designed to govern permissions and monitor behavior for AI-driven systems.

Enterprises Remain Uncertain About AI Agent Security

Despite these efforts, enterprises are still grappling with how to secure AI agents. A survey of 400 security leaders, cited by SiliconANGLE, revealed disagreement over which platform should lead AI agent identity security. Data security platforms, such as those offered by Palo Alto Networks Inc., were the most commonly favored option.

The survey also highlighted ambiguity about where AI agent attacks might originate and which security layers should respond. Todd Thiemann, Principal Analyst for Identity and Access Management and Data Security at Omdia, suggested that this complexity points toward a defense in depth approach—layered security—rather than relying on a single platform.

The acquisition of CyberArk Software Ltd. by Palo Alto Networks reflects broader consolidation in the identity security market, which may influence how enterprises approach AI agent security in the future.

Background: The Evolution of AI Security

Agentic AI, which involves autonomous systems making decisions and taking actions across platforms, has introduced new security challenges. Unlike traditional AI, these systems require dynamic identity management, permissions governance, and visibility to operate securely without human oversight.

The push for interoperable security controls aligns with broader trends in enterprise technology, where collaboration and standardization are increasingly prioritized over proprietary solutions. This shift mirrors developments in cloud services and cybersecurity, where consolidated platforms are becoming the norm.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

This shift toward interoperable AI security frameworks signals a maturing market where isolated vendor solutions are no longer sufficient. For startups and operators, the message is clear: AI-driven products must integrate with broader security ecosystems, like those proposed by the Blueprint Alliance, to gain enterprise trust. The emphasis on defense in depth—layered security rather than a single platform—means startups must design their systems to work seamlessly with tools from Okta, AWS, CrowdStrike, and others. The confusion among security leaders about who should lead AI agent security also presents an opportunity for startups to differentiate themselves by offering clarity and alignment with emerging standards.

Key takeaways

• Agentic AI security requires coordinated safeguards, not vendor-specific solutions.
• The Blueprint Alliance is working to make security controls and risk signals interoperable across AI platforms.
• Okta’s AI agent runtime gateway and Okta for AI Agents aim to provide governance for AI-driven systems.
• Enterprises are uncertain about how to secure AI agents, with security leaders divided over the best approach.
• Consolidation in the identity security market may accelerate efforts to standardize AI security controls.

FAQ

What is agentic AI security?

Agentic AI security refers to the protections and controls applied to autonomous AI systems—known as AI agents—that can make decisions and take actions across platforms without human intervention. These systems require dynamic identity management, permissions governance, and visibility to operate securely.

What is the Blueprint Alliance?

The Blueprint Alliance is a collaborative initiative founded by Okta Inc., Amazon Web Services Inc., CrowdStrike Holdings Inc., Salesforce Inc., and ServiceNow Inc. Its goal is to standardize security controls and risk signals across agentic AI systems to ensure interoperability.

Why is there disagreement among security leaders about AI agent security?

A survey of 400 security leaders revealed differing opinions on which platform should lead AI agent identity security. While data security platforms were favored, the lack of consensus reflects broader uncertainty about where attacks might originate and how to coordinate defenses across multiple security layers.

How does Okta’s AI agent runtime gateway work?

Okta’s AI agent runtime gateway provides authentication, authorization, and visibility for AI agents operating across platforms. It governs permissions and monitors behavior to detect anomalies, aligning with the Blueprint Alliance’s goals for interoperable security controls.

Related on Lazyfounder

• Silicon Valley’s transhumanist vision: AI, risks, and the battle for the future
• Oracle Targets Agentic AI Security Challenges with Database-Level Protections
• More technology news