
Cyber Security
Cayosoft Debuts Agentic AI Identity Change Controls And New Incident Response Offering At RSA 2026

Cayosoft Guardian 7.2 expands Identity Threat Detection and Response and Automated Rollback for AI identities; Launches Expert-Led, Identity-First Incident Response Service.
COLUMBUS, Ohio, March 17, 2026 (GLOBE NEWSWIRE) -- Cayosoft, the undisputed leader in Microsoft hybrid Active Directory (AD), Entra ID, and Microsoft 365 management, monitoring, and recovery, today announced significant updates to its Cayosoft Guardian platform, ahead of the RSA 2026 Conference. Cayosoft Guardian will now bring AI agent identities into existing identity threat detection and response (ITDR) workflows, giving security teams visibility, reporting, alerting, and automated rollback, without adding another dashboard. Cayosoft also launched a new Identity Forensics & Incident Response (IFIR) service, a purpose-built incident response offering designed specifically for Microsoft hybrid identity environments to address the growing operational and security risks created by complex environments and the rapid rise of non-human identities.
“We’re living in the age of AI, where the number of non-human identities has rapidly increased to supplement human identities. This major shift in the identity landscape means our customers need a reliable platform that can monitor, manage and recover identities instantly,” said Bob Bobel, Founder and CEO of Cayosoft. “By adding support for AI identities in the Guardian platform, and by launching our new incident response services powered by Guardian, we’re re-affirming our commitment to innovation to meet and exceed our customers' identity resilience needs.”
Cayosoft Guardian 7.2 Adds Monitoring & Detections for AI Identities
Non-human identities (NHIs) already outnumber human users in modern Microsoft ecosystems. The introduction of AI agents expands the identity attack surface even further through autonomous behavior, indirect permission assignment, and complex attribution. Many operate outside standard governance and monitoring practices, accumulating long-lived credentials, excessive permissions and unclear ownership that create security and compliance blind spots. Identity threat detection and response must therefore treat non-human identities as a core capability. With Cayosoft Guardian 7.2, expanded Change Monitoring for Microsoft Entra Agent ID entities helps security teams maintain visibility and control as agentic AI adoption accelerates, bringing agent-related changes into the same monitoring and investigation workflows used for users, groups and applications.
“As we deploy Microsoft agents, it’s critical that agent identities are governed just like any other identity,” said Hussein Alalawi, Senior Information Security Engineer of Auto Club Group. “With Cayosoft, we can see when agent identities are created, how permissions change, and exactly what actions they take—and we can roll those changes back if automation goes wrong. That’s what gives us confidence to run agentic AI at scale.”
Cayosoft Launches New Identity-First Incident Response Service
Powered by the Cayosoft Guardian Platform and delivered by Cayosoft’s identity security and incident response specialists, the Cayosoft Identity Forensics & Incident Response (IFIR) service delivers rapid detection, deep forensic reconstruction, and authoritative recovery across hybrid identity environments. Designed specifically for hybrid AD and Entra ID environments, Cayosoft provides expert-led dedicated identity investigation capabilities, immutable auditing and guaranteed recovery in minutes.
Specifically, Cayosoft’s IFIR capabilities include:
- Baseline evaluation of your Microsoft identity security, monthly check-ins to review remediation and prioritization, and yearly disaster recovery testing
- Real-time identity threat detection and alerting, including tracking attacker activity across hybrid AD and Entra ID
- Identifying patient zero and privilege escalation paths
- Reconstructing attack timelines using Guardian forensic replay
- Automated, authoritative rollback and remediation
- Guaranteed AD recovery in minutes via patented instant standby technology, restoring known-good identity baselines
- Applying controls to prevent ransomware reinfection
- Reducing incident recurrence through expert-led identity hardening
Cayosoft will be exhibiting at RSA 2026 in the Microsoft booth #5744 in the North Expo Hall at the Moscone Center. The company is hosting live demonstrations of its Guardian Platform and incident response service on Thursday, March 26th from 1-2pm PT.
To learn more about non-human identity change controls in Cayosoft Guardian, please visit https://www.cayosoft.com/blog/agent-identities-itdr-must-evolve/.
To learn more about Cayosoft’s Guardian platform, please visit https://www.cayosoft.com/products/guardian/.
To learn more about Cayosoft’s Identity Forensics & Incident Response Service, please visit https://www.cayosoft.com/identity-forensics-incident-response-service/.
About Cayosoft
Cayosoft delivers the only unified solution enabling organizations to securely manage, continuously monitor for threats or suspect changes, and instantly recover their Microsoft platforms, including on-premises Active Directory, Entra ID (formerly Azure AD), Microsoft 365, Intune, and more.
Unlike legacy solutions, Cayosoft builds with hybrid, cloud, and mobile users in mind, fully supporting an organization throughout its IT cloud journey. Manage by offering roles, rules, and automations for Active Directory user governance. Monitor for critical changes, risks, vulnerabilities, and threats that could compromise operations. Recover from simple objects up to multiple forests. Cayosoft is the only vendor offering instant AD forest recovery, in contrast to the hours, days, and weeks traditional solutions require. Satisfaction with Cayosoft is exceptionally high, with an average customer retention rate of 99% over the past three years.
To learn more, visit cayosoft.com and follow @cayosoft on LinkedIn, X/Twitter, and Facebook.
Media Contact:
Michelle Schafer
Merritt Group for Cayosoft
cayosoft@merrittgrp.com
Frequently Asked Questions
What new capabilities does Cayosoft Guardian 7.2 introduce?
Cayosoft Guardian 7.2 expands Identity Threat Detection and Response (ITDR) workflows to include AI agent identities, providing enhanced visibility, reporting, alerting, and automated rollback for non-human identities within Microsoft hybrid environments.
What is the Cayosoft Identity Forensics & Incident Response (IFIR) service?
The IFIR service is a new expert-led offering by Cayosoft designed for Microsoft hybrid identity environments. It provides rapid detection, deep forensic reconstruction, and authoritative recovery capabilities to address operational and security risks from complex identity landscapes.
What Microsoft platforms does Cayosoft Guardian support?
Cayosoft Guardian provides management, monitoring, and recovery for a range of Microsoft platforms, including on-premises Active Directory, Entra ID (formerly Azure AD), Microsoft 365, and Intune.
First published on Tue, Mar 17, 2026
Enjoyed what you've read so far? Great news - there's more to explore!
Stay up to date with the latest news, a vast collection of tech articles including introductory guides, product reviews, trends and more, thought-provoking interviews, hottest AI blogs and entertaining tech memes.
Plus, get access to branded insights such as informative white papers, intriguing case studies, in-depth reports, enlightening videos and exciting events and webinars from industry-leading global brands.
Dive into TechDogs' treasure trove today and Know Your World of technology!
Disclaimer - Reference to any specific product, software or entity does not constitute an endorsement or recommendation by TechDogs nor should any data or content published be relied upon. The views expressed by TechDogs' members and guests are their own and their appearance on our site does not imply an endorsement of them or any entity they represent. Views and opinions expressed by TechDogs' Authors are those of the Authors and do not necessarily reflect the view of TechDogs or any of its officials. While we aim to provide valuable and helpful information, some content on TechDogs' site may not have been thoroughly reviewed for every detail or aspect. We encourage users to verify any information independently where necessary.
Trending GlobeNewswire
Apiiro Redefines Design-Phase Security With AI Threat Modeling Built For The AI Coding Agent Erapreventing Risks Before Code Exists
Brandfuel.Ai And Hairball.Io Announce Partnership To Deliver The First AI-Native Product Publishing Workflow For Netsuite Merchants
Cycode Unveils Agentic Development Security Platform
ESET Launches Cloud Workload Protection And AI Enhancements For ESET PROTECT Customers
ESET Presents Six Sessions At RSAC 2026 To Advance Cyber Resilience
Join Our Newsletter
Get weekly news, engaging articles, and career tips-all free!
By subscribing to our newsletter, you're cool with our terms and conditions and agree to our Privacy Policy.
Join The Discussion