Enterprises are at risk of losing count of their own AI workforce

The AI governance gap is widening rapidly as AI agents assume operational roles inside enterprise workflows, expanding the security perimeter faster than most organizations can mitigate exposure.

But the shift from security awareness training to human risk management is no longer where the governance conversation stops. The harder problem now is what happens when the human workforce is joined — and in some cases outnumbered — by autonomous agents that nobody fully cataloged or credentialed, according to Greg Kras (pictured), chief product officer at KnowBe4 Inc. The agents themselves have become the ungoverned endpoint — and unlike employees, they can multiply overnight.

“The fact that agents can beget agents — it becomes very interesting,” Kras said. “If you think of traditional human staffing, you usually know when you have a new person on your team, but with agents, an agent could spin up another agent or ingest a [Model Context Protocol server] that may or may not be what they should be doing.”

Kras spoke with theCUBE’s Scott Hebner at KB4-CON 2026, during an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed how KnowBe4 is addressing the AI governance gap by extending human risk management into agentic AI security. (* Disclosure below.)