43,500 attendees, 700+ speakers, 600+ exhibitors — and one overwhelming theme. RSAC 2026 was the conference where the security industry admitted that AI agents have changed everything. Here's our definitive wrap-up.
A new Human-in-the-Loop authorization framework combines IBM WatsonX orchestration, Auth0 CIBA identity flows, and Yubico YubiKey hardware attestation to create cryptographically verified human approval for high-stakes AI agent actions.
The world's largest cybersecurity conference opens with a single obsession: AI agents. From 80% automated attack chains to multi-agent governance gaps, here's what's dominating the floor.
The OWASP GenAI Security Project releases its most comprehensive update yet: agentic red teaming taxonomy, MCP server security guide, GenAI data security risks — plus a live agentic AI Capture the Flag at RSAC 2026.
Salt Security launches the industry's first platform to secure the entire agentic AI stack — mapping how LLMs reason, MCP servers connect, and APIs execute — with the Agentic Security Graph providing real-time visibility into what your AI agents can actually do.
Entro Security launches Agentic Governance & Administration (AGA) for shadow AI discovery and MCP enforcement. Apono launches Agent Privilege Guard with Intent-Based Access Controls and zero standing privileges. Together, they map the full agent governance stack — both headed to RSAC 2026.
HiddenLayer's 2026 AI Threat Landscape Report reveals that agentic AI breaches are already materializing — with supply chain malware as the #1 vector, shadow AI at 76%, and a transparency crisis where 53% of orgs admit hiding incidents.
TrojAI, Cyware, Token Security, Reco, and Menlo Security all announced agent security platforms on March 18. The RSAC pre-wave confirms: agent security is now its own market category.