Token Security Says SOC 2 Controls Need to Account for AI Agent Identity Risk

Token Security is warning that an organization can pass a SOC 2 audit and still lack basic answers about which AI agents are running, who approved them and which credentials they use. The company argues that audit programs built around conventional application and access controls need a more explicit agent-identity layer as autonomous systems move into production.