# IBM makes Agent Identity and HashiCorp Vault 2.2 generally available to govern AI agents

Source: https://startwithidentity.com/blog/2026-10-27-ibm-makes-agent-identity-and-hashicorp-vault-2-2-generally-available-for-ai-agents/
Last updated: 2026-10-27
License: content by Start with Identity. Cite the source URL.

---

IBM announced identity and control features for enterprise AI agents at its TechXchange 2026 conference in Atlanta on October 27. Two are generally available now. IBM Agent Identity "establishes the authoritative record for each agent," covering its owner, lifecycle status and granted authority. [HashiCorp Vault](https://startwithidentity.com/vendors/machine-identity/hashicorp-vault/) 2.2 gives agents their own secured accounts, renews their credentials automatically and adds post-quantum encryption, and IBM says Vault enables "real-time revocation when an agent attempts an unauthorized action." IBM also made watsonx Orchestrate evaluation features generally available, while Discover, which finds agents built on Amazon Bedrock, Microsoft Foundry and Google Gemini, and Contain, which sandboxes agents and adds a kill switch, are in tech preview. Secure Hub, for visibility across Vault environments, is in public preview. IBM cited Gartner figures that only 13% of organizations believe they have the right AI agent governance in place.

## Why it matters

The announcement splits agent identity into two records: who the agent is and who answers for it, and what short-lived credential it holds right now. It is the same split [Infisical](https://startwithidentity.com/vendors/secrets/infisical/) is [funding with its credential broker](https://startwithidentity.com/blog/2026-10-27-infisical-raises-40-million-series-b-for-secrets-and-ai-agent-credentials/). An agent running on a developer's long-lived API key has neither: no named owner and no expiry.

Whatever platform you use, give every agent an accountable human owner, issue it scoped credentials that expire, and make revocation a tested path, not a ticket. At TechXchange, Albert Einstein College of Medicine is presenting its use of [IBM Verify](https://startwithidentity.com/vendors/iam/ibm-verify/) and Vault for agent identity. Our guide to [securing AI agent identities](https://startwithidentity.com/guides/machine-identity/securing-ai-agent-identities/) covers the controls, and the [Agent Identity Standards Map 2026](https://startwithidentity.com/reports/agent-identity-standards-map-2026/) maps the open standards for agent authentication and delegation.

Source: [IBM Newsroom](https://newsroom.ibm.com/2026-10-27-ibm-introduces-identity-and-control-for-ai-agents,-securing-frontier-intelligence-for-the-enterprise)