DigiCert has introduced the DigiCert AI Trust Manager, a feature of the DigiCert ONE platform. This newly available tool is designed to assist organizations in identifying and managing the AI agents within their operations. The system allows for the verification of an AI agent's identity and ownership, the definition of its authorized activities, and the implementation of a kill switch to revoke authorization when necessary.
AI agents, which are capable of accessing sensitive information, using software, writing code, making decisions, and executing transactions with minimal human intervention, pose a unique challenge. Current enterprise security measures often fall short in managing these autonomous agents that navigate applications, clouds, and organizational structures at the speed of machines.
Enterprise Security Challenges
Risks associated with AI are becoming apparent. In a DigiCert survey conducted in July 2026 involving 1,001 IT and cybersecurity leaders, 78% reported encountering AI-related security issues or uncovering vulnerabilities within the past year. Amit Sinha, CEO of DigiCert, commented, "For more than two decades, DigiCert has provided the cryptographic infrastructure that helped the internet scale. We are now bringing that proven trust model to AI agents so organizations can verify who they are, who owns them, and what they are authorized to do."
Revolutionizing Traditional Identity Systems
Traditional identity systems are akin to employee badges, fostering trust within a single organization
Traditional identity systems are akin to employee badges, fostering trust within a single organization. The core of the DigiCert AI Trust Manager is the DigiCert AI Passport—a portable, cryptographically signed credential that authenticates an agent's identity and associates it with an accountable owner. Policy-driven "visas" specify the systems, data, and actions accessible to the agent, along with the duration of authority.
The portability of the DigiCert AI Passport ensures that other systems and organizations can independently verify them without using the same identity provider. If an agent oversteps its permissions, DigiCert's automated kill switch can quickly block actions and, following policies set by the agent’s owner or passport issuer, instantly revoke its authority and contain it before damage occurs.
Capabilities of DigiCert AI Trust Manager
- Agent Discovery: Locate and identify AI agents, whether purchased or developed internally, and connect them to a responsible owner.
- Access Management: Specify the systems, data, and actions accessible to an agent, as well as the validity period of its permissions.
- Cross-Organizational Trust: Enable independent verification of an agent across different systems and companies without requiring a common identity provider.
- Responsive Adjustments: Update credentials, expire permissions, or revoke access based on policy changes, risk factors, or other developments.
Addressing Autonomous System Challenges
Grace Trinidad, Research Director at IDC’s AI Security and Trust division, noted, "Enterprise AI buying has moved from trust to proof. Buyers are ranking verifiable security controls as their top priority and name unverifiable vendor claims as their top frustration. Cryptographic identity, attestation, and revocation for agents, models, and MCP servers are the machinery that produces this proof, which in turn produces trust, and DigiCert is pointing the identity discipline the internet already runs at scale at exactly that problem."
The integration of AI agents into enterprise workflows necessitates clear identity and accountability to deploy them responsibly on a large scale. Ajitha Choudary, Vice President of Global Security Engineering & IAM at UKG, emphasized, "As AI agents become more embedded in enterprise workflows, establishing clear identity and accountability will be essential. The ability to verify an agent’s identity, define what it is authorized to do, and maintain visibility into its actions could give organizations the foundation they need to adopt agentic AI with greater confidence."
DigiCert AI Trust Manager is a part of the organization's expansive AI trust architecture, applying cryptographic verification across AI agents, models, and content. It serves as a portable ally to existing identity and security measures, ensuring seamless verification of an agent's credentials and authority wherever they operate.
