Opal Security Introduces AI Agents to Modernize Access Governance Workflows

Opal Security, the AI-native access governance platform for every identity, this week at Identiverse 2026 announced Agents in Opal, a set of AI agents built directly into its platform. The release begins with AI-Guided Access Reviews, powered by Opal’s Paladin, an AI agent for access governance that can reason and make recommendations.

Also Read: The AI Architectural Trap: Avoiding One-Way Doors

Access has outgrown human scale. Non-human and agent identities already outnumber people, and the roughly 100-hour review cycle that teams still run cannot keep pace. AI agents make the gap wider. They are deployed faster than security teams can track them, they often inherit the standing, over-scoped credentials of the people who created them, and they multiply the number of identities that need to be governed. Workflows alone do not close that gap. It takes agents that can reason over access, make recommendations, and handle routine decisions, while a person stays accountable for the calls that carry risk.

Meet Paladin: Opal’s AI agent for access governance. Paladin reasons over access, makes recommendations, and handles the routine calls, while a human signs off on the ones that matter.

With Agents in Opal, customers can now put agents to work across four areas:

– Access reviews. Paladin reduces review effort and raises review quality.

– Access requests. Paladin accelerates fulfillment while enforcing policy on every grant.

– Access intelligence. Ask who has access to what in plain English with OpalQuery, no query language required.

– Policy and remediation. AI-assisted OpalScript automates governance workflows and remediation actions.

Every agent runs on the same access graph, governance model, and audit trail, so every recommendation, decision, and action stays transparent and reviewable. That is how organizations move from manual identity administration to AI-assisted governance without giving up control.

The flagship: AI-Guided Access Reviews

The access review is where machine scale breaks first. Paladin groups low-risk grants, shows the evidence behind each one, and lets reviewers clear them in a single click, which can cut review effort by up to 90 percent. Reviewers spend their attention on the access that could actually cause harm. Reviews can be scoped in minutes, the right reviewers are assigned automatically, and reminders, progress tracking, and a complete decision history keep the process audit ready.

The control sits with the customer. Teams set how much Paladin handles on a dial rather than a switch, and a human signs off on every certification, so the result holds up to an auditor. Where much of the market is moving toward fully autonomous decisions, Opal keeps a person accountable for the access that matters, which is the position security leaders and auditors can defend.

“Access used to be a one-time decision. Today it is a continuous, high-volume problem across humans, services, and AI agents at machine speed,” said Sameer Mehta, Chief Product Officer at Opal Security. “Governing it takes agents that can reason over access and handle the routine work, with a human accountable for the calls that matter. We are bringing agents to Opal, starting with the place machine scale breaks first: the access review.”

Also Read: Hyper-Synthetic Data: The Future of Cybersecurity

Proven in production

The best security and engineering teams protect their access with Opal. Databricks runs more than 86,000 time-bound access requests through Opal, and Chronosphere has cut standing access by 88 percent.

“Once our access data was centralized in Opal, generating user access reviews became effortless,” said Sharon Aby, Senior Manager of IAM at Databricks.

“Agents will need to be more and more treated as identities,” said Jason Fernandes, VP of Security and Privacy at Mercari.

Agents will multiply faster than any identity before them, and they will not wait for a quarterly review. The teams that stay ahead will be the ones whose governance runs at machine speed and still answers to a human.

Write to us [⁠wasim.a@demandmediaagency.com] to learn more about our exclusive editorial packages and programmes.