New Agent Integrity Framework defines the category for governing autonomous AI in the enterprise and enforcing agent behavior at scale

• Building on Proofpoint’s acquisition of Acuvity, delivers the latest AI security solution built on continuous, intent-based verification, securing AI across endpoints, browsers, and MCP agent connections
• Introduces the industry-first Agent Integrity Framework with a five-phase maturity model, giving CISOs a clear, phased roadmap to operationalize AI governance—from discovery to runtime enforcement
• Establishes Proofpoint as a market-defining cybersecurity platform to protect people, defend data, and govern AI together in today’s agentic workspace. 

SUNNYVALE, Calif. – March 17, 2026 – Proofpoint, Inc., a leading cybersecurity and compliance company, today announced Proofpoint AI Security, the industry’s newest security solution that combines intent-based detection, multi-surface control points, and a comprehensive implementation framework to secure how humans and AI agents use AI across the enterprise. Based on the industry-first Agent Integrity Framework, which defines how an AI agent operates with integrity, Proofpoint is introducing a five-phase maturity model for implementation, from initial discovery through runtime enforcement.

As organizations rapidly deploy autonomous AI agents to browse the web, access internal systems, send emails, execute code, and orchestrate workflows, risks such as agentic privilege escalation and zero-click prompt injection attacks are becoming real-world threats. A single AI request can trigger dozens of autonomous actions across multiple systems, often at machine speed and without human oversight. Existing security tools can see traffic and permissions, but they don’t evaluate whether AI behavior aligns with the original user intent. Research from Acuvity, recently acquired by Proofpoint, indicates that 70% of organizations lack optimized AI governance, and 50% reported expectations of AI-related data loss within 12 months, highlighting the urgent need to secure agentic AI environments.

“AI is now embedded in how work gets done, and security must evolve with it,” said Sumit Dhawan, CEO of Proofpoint. “Humans and AI agents share similar risks: both can be manipulated and both can take actions that diverge from their intended purpose, yet traditional security was never designed to validate intent. Proofpoint is uniquely positioned as a unified cybersecurity platform built to protect people, defend data, and govern AI agents together, providing continuous, intent-based verification that behavior aligns with policy and intent in the agentic workspace.”

Intent-based Detection Models across all AI Interactions

Traditional security tools lack visibility into the semantic content of AI interactions, where risk often resides. They can see traffic, identities, or permissions, but they cannot determine whether an AI’s actions are appropriate in context or aligned to the intent of the user or agent.

Proofpoint AI Security closes this gap by applying intent-based detection models, continuously evaluating whether AI behavior, initiated by a human or an autonomous agent, aligns with the original request, defined policies, and intended purpose. By analyzing the full semantic context of AI interactions, the solution flags misaligned or high-risk actions in real time, before damage occurs, such as non-compliant communication or data loss.

Protecting Against the Full Spectrum of Autonomous AI Risks

Delivered through a unified architecture for the agentic workspace, Proofpoint AI Security operates across the surfaces where AI is used—including endpoints, browser extensions, and MCP connections—giving organizations the visibility and control needed over AI usage and risks. This is particularly critical in developer environments, where agent-connected coding assistants, plugins, and MCP-integrated tools are accelerating adoption and increasing the need for visibility and policy enforcement.

Through these control points, organizations can:

• Discover sanctioned and unsanctioned AI tools such as OpenClaw, Ollama, ChatGPT, and MCP servers used by humans and agents
• Observe prompts, responses, and data flows during AI tool usage
• Apply access controls and guardrails on AI usage
• Implement runtime inspection and enforce policies during live AI interactions

Structured Path to Implementation with Agent Integrity Framework and Market-First AI Maturity Model

To provide enterprises with a structured roadmap to safely govern AI, Proofpoint is also introducing the Agent Integrity Framework, a comprehensive guide that defines what it means for an AI agent to operate with integrity and provides a five-phase maturity model for implementation, from initial discovery through runtime enforcement.

The framework defines Agent Integrity as the assurance that an AI agent operates within the boundaries of its intended purpose, authorized permissions, and expected behavior—across every interaction, tool call, and data access. It outlines five pillars: Intent Alignment, Identity and Attribution, Behavioral Consistency, Auditability, and Operational Transparency, to help customers operationalize AI governance without needing to overhaul their existing security architecture.

“Humans are expected to operate with integrity when using business systems, and AI agents must be held to the same standard,” said Ryan Kalember, executive vice president of cybersecurity strategy at Proofpoint. “Agent Integrity means ensuring that AI agents act within the boundaries of their intended purpose, authorized permissions, and expected behavior across every interaction, tool call, and data access. With Proofpoint AI Security and the Agent Integrity Framework, we can provide a clear blueprint to help enterprises comprehensively address the full spectrum of risks that emerge when AI agents operate autonomously across enterprise systems.”

Proofpoint AI Security is available today in all global markets. For more information, visit: https://www.proofpoint.com/us/platform/ai-security

The Agent Integrity Framework can be accessed at: https://acuvity.ai/the-agent-integrity-framework-and-maturity-model

Read our blog: https://www.proofpoint.com/us/blog/corporate-news/intent-design-security-autonomous-ai

###

About Proofpoint, Inc. 

Proofpoint, Inc. is a global leader in human- and agent-centric cybersecurity, securing how people, data, and AI agents connect across email, cloud, and collaboration tools. Proofpoint is a trusted partner to over 80 of the Fortune 100, over 10,000 large enterprises, and millions of smaller organizations in stopping threats, preventing data loss, and building resilience across people and AI workflows. Proofpoint’s collaboration and data security platform helps organizations of all sizes protect and empower their people while embracing AI securely and confidently. Learn more at www.proofpoint.com.

 
Connect with Proofpoint on LinkedIn

Proofpoint is a registered trademark or tradename of Proofpoint, Inc. in the U.S. and/or other countries. All other trademarks contained herein are the property of their respective owners.