What happened
Netwrix released (Aug 18, 2026) PingCastle 4.0, extending Entra ID risk coverage to 102 checks, and Threat Manager 3.3, which adds an inventory of AI-agent identities and their access in Entra ID plus new Azure Files threat detection; agent-specific threat detection is explicitly deferred to a later release.
Why it matters
Targets the foundational agent-governance gap Netwrix's own research found (only 19% of orgs fully govern non-human identities, 43% breach rate where AI expanded identity count) — inventory is a prerequisite most orgs still lack.
Applicability
Microsoft-centric enterprises should use this to build an AI-agent identity inventory now; note detection capability is still forthcoming, not yet in this release.