Exabeam today expands its Agent Behavior Analytics (ABA) to detect how AI agents operate inside the enterprise, extending visibility to OpenAI ChatGPT and Microsoft Copilot while maintaining existing support for Google Gemini. The update treats AI assistants as autonomous digital workers, capable of authenticating, accessing systems, and performing business tasks, which means security teams need deep baseline behavior and real-time risk signals to identify subtle deviations. The release outlines five integrated capabilities that together strengthen threat detection, investigation, and response: baselining, prompt and model abuse detection, identity and privilege monitoring, agent lifecycle monitoring, and OWASP Top 10 coverage for agentic AI. This aims to reduce risk as organizations scale AI use.
Key points
- AI Behavior Baselining. Dynamic profiles track requests, token usage, tool invocations, sessions, and outbound activity; deviations trigger alerts before escalation.
- Prompt and Model Abuse Detection. Detects prompt injection, model manipulation, and tool exploitation; expanded detection library surfaced at entry.
- Identity and Privilege Monitoring. Monitors AI platform roles, users, and permissions; flags first-time role assignments, privilege escalations, and unusual changes.
- Agent Lifecycle Monitoring. Provides visibility into creation, modification, and usage of AI agents; surfaces first-agent-creation and invocation events as auditable signals.
- OWASP Top 10 Coverage for Agentic AI. Monitors agent behavior against the OWASP Top 10, establishing a governance benchmark for enterprise AI agents.
Why it matters
By treating AI agents as integral parts of the enterprise, the update helps security teams establish baselines and quickly spot unusual activity that could indicate misuse or compromise. As organizations deploy AI assistants at scale, governance and visibility become essential to balancing rapid AI-enabled workflows with risk controls. The five capabilities work together to provide continuous monitoring, auditable signals, and policy-aligned safeguards, enabling teams to defend digital workers while expanding AI usage responsibly.
What to watch
- Rollout and customer adoption of the five new capabilities across the ABA platform and related platforms.
- Expanded coverage for OpenAI ChatGPT, Microsoft Copilot, and Google Gemini.
- Improvements to administrator and security-analyst workflows on Exabeam New-Scale and LogRhythm Platforms.
Disclosure: The content below is a press release provided by the company or its PR representative. It is published for informational purposes.
Exabeam Expands ABA to OpenAI and Copilot for AI Agent Monitoring
Exabeam Confronts AI Insider Threats Extending Behavior Detection and Response to OpenAI ChatGPT and Microsoft Copilot
Applies behavior profiling and analytics to the digital workforce, giving security teams full visibility into how users and AI agents interact across the enterprise
BROOMFIELD, Colo. — April 1, 2026 – Exabeam, the leader in behavior intelligence for the agentic enterprise, today announced a major expansion of Exabeam Agent Behavior Analytics (ABA). Without direct visibility into how employees are using AI assistants — what they query, what data they share, how frequently they interact, and from where — organizations cannot baseline normal AI behavior, investigate possible misuse, or detect emerging agentic insider threats.
New support to detect agent behavior in OpenAI ChatGPT and Microsoft Copilot,alongside existing visibility into Google Gemini, transforms these agentic services into rich sources of behavior telemetry that feed directly into Exabeam threat detection, investigation, and response (TDIR) workflows.
“AI agents are evolving from simple chatbots into autonomous digital workers,” said Steve Wilson, Chief AI and Product Officer at Exabeam. “They authenticate, access systems, and execute real business processes. When compromised, their activity will often look legitimate. Guardrails designed to catch prompt injection or hallucinations do not address that risk. Securing digital workers requires deep visibility into baseline behavior and the ability to detect subtle deviations before they become material incidents.”
“AI is rapidly reshaping how organizations operate, compete and grow, creating a new, digital workforce that helps them move faster and at scale,” said Pete Harteveld, CEO at Exabeam. “As this transformation accelerates leaders are compelled to understand how these systems operate inside the enterprise. Our expansion of Agent Behavior Analytics helps organizations stay protected from emerging risks while adopting AI with confidence and maintaining the oversight and accountability required to proliferate these capabilities across an enterprise.”
To address these fast-evolving threats, Exabeam has delivered five new capabilities that work together to provide complete coverage of the agentic attack surface:
- AI Behavior Baselining. Exabeam builds dynamic behavior profiles for users and their AI agents, tracking patterns across request volumes, token usage, tool invocations, web sessions, and outbound activity. When behavior deviates from established norms, such as sudden spikes in API calls or token consumption. Exabeam flags the anomaly, helping security teams detect misuse before it escalates.
- Prompt and Model Abuse Detection. Exabeam detects prompt injection, model manipulation, and tool exploitation before attacks escalate. A new detection library, five times larger than the previous version, covers the full threat spectrum: prompt manipulation, and shadow AI activity. All surfaced at the point of entry, not after the damage is done.
- Identity and Privilege Monitoring. While baselining tracks how agents behave, identity and privilege monitoring governs what they’re allowed to do. Exabeam detects anomalies across AI platform roles, users, and permissions — including first-time role assignments, unexpected privilege escalations, and unusual permission changes, ensuring AI identities are governed with the same rigor as traditional enterprise identities.
- Agent Lifecycle Monitoring.Exabeam provides full visibility into the creation, modification, and usage of AI agents, surfacing first-agent-creation and invocation events as discrete, auditable signals. Security teams can now track the complete lifecycle of every agent operating in their environment, closing the governance gap that has made agent activity invisible to most organizations.
- Coverage for OWASP Top 10 for Agentic AI. Exabeam monitors agent behavior against the OWASP Top 10 for Agentic AI, bringing measurable coverage to a threat category that previously lacked a defined framework. This alignment establishes a benchmark for governing and defending AI agents in the enterprise.
“As we move deeper into the agentic era, the rapid adoption of AI agents — including a growing ecosystem of enterprise-grade AI tools across our organization — is transforming the risk landscape,” said Nithin Reddy, Global VP of Cybersecurity at Dayforce. “Security teams now operate in a world where both humans and autonomous agents interact with systems and data at a massive scale. Traditional detection models weren’t built for this reality. What we need is clear behavior visibility and a simple way to quantify risk. Exabeam gives us that clarity — helping us focus on the risks that actually matter instead of chasing thousands of benign signals and enabling us to put the right guardrails in place while continuing to accelerate AI innovation across the business.”
These new capabilities are accompanied by a broad set of enhancements across the Exabeam New-Scale and LogRhythm Platforms, designed to improve the day-to-day experience for administrators and security analysts while continuing to deliver deep visibility and automated response that helps teams streamline workflows, reduce alert fatigue, and accelerate threat detection.
To learn more, visit www.exabeam.com/whats-new
About Exabeam
Exabeam is the leader in behavior intelligence for the agentic enterprise. As organizations deploy digital workers and confront machine-speed adversaries, Exabeam applies agent-powered analytics to understand and govern the behavior of both human and non-human insiders. With integrated Exabeam Nova cybersecurity agents, Exabeam delivers flexible, industry-proven solutions for insider threat coverage of humans and agents and faster, more accurate threat detection, investigation, and response (TDIR). As the pioneer of user and entity behavior analytics (UEBA) and the innovator behind Agent Behavior Analytics (ABA), Exabeam is trusted by more than 3,000 enterprises worldwide to reduce risk, secure the digital workforce, and accelerate security operations. Learn more at www.exabeam.com.
Exabeam: Real Intelligence. Real Security. Real Fast.
Contacts
10Fold Communications
