Shufti launches Know Your Agent (KYA) to verify AI agent identity, owner and permissions
Shufti has launched Know Your Agent (KYA), a product that verifies autonomous AI agents acting for individuals and businesses in agentic commerce. It targets risks such as stolen credentials that look legitimate and agent impersonation, where fake agents pose as trusted ones. The solution is a vendor product announcement and does not describe a specific incident or vulnerability.
Detalhes técnicos
- Each agent gets a unique, time-bound, revocable credential and a trust score; known agents are recognised by name and unfamiliar ones are assessed with behavioural biometrics.
- Agents are linked to an individual or business verified through Shufti's KYC or KYB process.
- A principal sets a mandate (permitted actions, limits, expiry, revocation) that is enforced as policy on every request, with ongoing monitoring for misuse.
- Out-of-mandate or high-risk requests trigger human-in-the-loop control through a selfie liveness check (iBeta Level 3 certified for presentation attack resistance).
- An audit trail records requests, decisions and revocations per agent and principal.
- Shufti says it already supports agents such as Meta Muse, GrokBot and OpenAI Dots.
Linha do tempo
-
Shufti launches Know Your Agent (KYA) to verify AI agent identity, owner and permissions
ler a análise desta fonte ocultar
Shufti has launched Know Your Agent (KYA), a product that verifies autonomous AI agents acting for individuals and businesses in agentic commerce. It targets risks such as stolen credentials that look legitimate and agent impersonation, where fake agents pose as trusted ones. The solution is a vendor product announcement and does not describe a specific incident or vulnerability.
Technical Details
- Each agent gets a unique, time-bound, revocable credential and a trust score; known agents are recognised by name and unfamiliar ones are assessed with behavioural biometrics.
- Agents are linked to an individual or business verified through Shufti's KYC or KYB process.
- A principal sets a mandate (permitted actions, limits, expiry, revocation) that is enforced as policy on every request, with ongoing monitoring for misuse.
- Out-of-mandate or high-risk requests trigger human-in-the-loop control through a selfie liveness check (iBeta Level 3 certified for presentation attack resistance).
- An audit trail records requests, decisions and revocations per agent and principal.
- Shufti says it already supports agents such as Meta Muse, GrokBot and OpenAI Dots.