Proofpoint Launches Dual Agentic Security Systems to Combat AI-Era Threats and Secure Autonomous Agents

Proofpoint Addresses Growing AI Security Challenges with Dual System Launch

Proofpoint has unveiled two interconnected agentic security systems designed to tackle the mounting cybersecurity challenges organizations face as AI adoption accelerates. The company announced both the Proofpoint Agentic Collaboration Security system and the Proofpoint Agentic Data and AI Security System, marking a significant shift in how enterprises can protect communication channels while simultaneously securing autonomous AI agents1

1

2

2

. These AI-driven security solutions address a critical gap: 87% of organizations have moved AI assistants beyond pilot programs, yet 52% lack confidence their controls could detect a compromise2

2

.

Intent-Based Detection Transforms Threat Identification

The Proofpoint Agentic Collaboration Security system introduces a fundamentally different approach to identifying sophisticated cyberattacks that increasingly mimic legitimate business activity. At its core lies the Nexus Intent-Based Detection Model, which reasons over context using multi-stage AI reasoning to determine what an interaction is trying to accomplish1

1

. Most decisions resolve in under half a second, while ambiguous cases receive deeper analysis to distinguish malicious intent from legitimate activity. Tom Corn, executive vice president and general manager of Threat Protection Group at Proofpoint, explained the challenge: "Attackers increasingly operate inside the relationships and workflows organizations already trust. That changes the detection problem. Security needs to understand what an interaction is trying to accomplish, reason over the context around it, and act before the attacker succeeds"1

1

.

Proofpoint Knowledge Graph Provides Unified Foundation

Both agentic security systems share a common foundation: the Proofpoint Knowledge Graph, which combines threat intelligence on active campaigns, industry attack patterns, and compromised suppliers with organizational context including business relationships, communication patterns, data access, and user risk1

1

2

2

. This shared intelligence foundation connects AI activity with data sensitivity, identity, access, behavior, and intent through Nexus models, allowing one control point to inform detection, investigation, and user protection across the entire system. The Knowledge Graph already secures more than 14,000 enterprises' data, providing the contextual understanding necessary for the new agentic capabilities to function effectively2

2

.

Autonomous Threat Investigation Reduces Response Time

Proofpoint's approach extends beyond detection to include autonomous threat investigation capabilities that dramatically compress incident response timelines. The Investigation Agent automatically reconstructs attacks, identifies related messages, determines blast radius, and assembles evidence needed for response, reducing what once took days of manual correlation into minutes1

1

2

2

. For collaboration security, Proofpoint operates both email gateway and API-based protection, allowing intent analysis to begin before delivery and continue in the inbox. The company is the only secure email gateway to deliver intent-based detection before a message reaches the user1

1

.

Advanced Browser Protection Extends Security Perimeter

Proofpoint introduced Advanced Browser Protection, developed in partnership with Push Security, as the first collaboration security offering to unify email threat intelligence with browser-native protection1

1

. This enhancement helps organizations stop post-click phishing, malicious URLs, browser extensions, OAuth phishing, credential theft, and session hijacking. Browser telemetry integrates into Threat Protection Workbench, the Proofpoint Security Graph, and the Investigation Agent, giving security teams unified visibility across the entire collaboration attack surface.

Securing Autonomous AI Agents at Runtime

The Proofpoint Agentic Data and AI Security System addresses a different but equally pressing challenge: AI agents now discover, access, transform, and act on sensitive data at a scale no manual review can match2

2

. Traditional approaches that secure AI and data separately leave critical risk unseen because AI tools often see intent but not data access, while data tools see sensitive data but not agent intent. The system enables organizations to safely deploy AI agents with access to only the data they need based on intent, while translating existing business policies into runtime controls and continuously uncovering emerging risks across human and autonomous AI activity2

2

.

Semantic Business Policies Translate Governance into Action

Proofpoint Semantic Business Policies represent a breakthrough in translating existing governance requirements into continuously enforced AI controls2

2

. Organizations can express rules already written into their code of conduct in plain language, such as "Do not allow interactions with gambling content." Proofpoint interprets the intent behind the policy, identifies the systems capable of carrying it out, and generates runtime controls to enforce it automatically. Combined with Proofpoint Intent-Based Access Control, these policies evaluate AI behavior against both enterprise requirements and an agent's intended purpose, whether an employee acts through an AI assistant or an autonomous agent acts on their behalf at AI speed.

Zero-Touch Detection and Agentic Insights Uncover Emerging Risks

The Detection Agent within the data and AI security system provides Zero-Touch Detection, seeing intent and access as a single signal and surfacing the handful of actions that matter instead of generating floods of anomalies traditional tools produce2

2

. Agentic Insights uses autonomous reasoning agents to analyze AI interactions, tool usage, policy decisions, and behavioral patterns to uncover emerging risks. When a risk is validated, Proofpoint can recommend a Semantic Business Policy to govern similar behavior, turning new intelligence into enforceable protection and keeping pace with risks organizations haven't yet defined. Capabilities within the Proofpoint Agentic Data and AI Security System, including Semantic Business Policies and Agentic Insights, are expected to be available by year-end 20262

2

.