ThreatLocker has launched Zero Trust AI Control (ZTAIC), a product it says is designed to help organisations deploy so-called “agentic” AI while limiting what AI agents can access and execute inside corporate environments.
The company said ZTAIC is intended to apply policy controls outside the AI model or application itself, in response to concerns that AI “guardrails” built into agent workflows may be bypassed or may fail when an agent behaves unexpectedly. The aim, ThreatLocker said, is to let security teams define what an AI agent is permitted to do across applications, processes and services.
“The security challenge has fundamentally changed because AI agents aren’t just providing information anymore. They’re being used to take actions across an organisation’s environment,” said Danny Jenkins, CEO and co-founder of ThreatLocker.
“Organisations around the world need a way to adopt AI with the peace of mind that they aren’t handing over the keys to their environments.”
ThreatLocker said ZTAIC includes recommended policies intended to reduce the work required to secure AI deployments, with security teams able to start from pre-built settings and tailor them to their own environment.
The company positioned the release around the operational reality of agentic AI deployments, where a single prompt or request can trigger actions across scripts, browsers, applications and external services. ZTAIC, it said, is designed to maintain access boundaries throughout those workflows by controlling what agents can access, execute and connect to.
ThreatLocker said ZTAIC can be used alongside its existing products, including ThreatLocker Allowlisting and Web Content Control, to restrict which AI applications and browser-based services are permitted in an environment and what authorised agents can do once running.
