HR agent 02
- Sent 412 KB to files-drop.io, a destination it has never used, straight after reading salary records.
- The session began with an external CV, so the agent's context held untrusted content.
- 3 high-confidence alerts in the period.
Agent Monitoring is designed to watch what each agent does, score the risk of every action, and give your security lead an evidenced decision for each agent in each context.
Banks know how to monitor millions of actors they cannot fully trust. Agent Monitoring carries that playbook across.
| Bank transaction monitoring | Agent Monitoring |
|---|---|
| Know-your-customer record | Agent manifest: named owner, purpose, permitted tools and data, autonomy level |
| Transactions | Agent actions: tool calls, data read, data sent out, payments made |
| Typologies such as money mules | Risk scenarios mapped to the Five Eyes categories and OWASP agentic risks |
| Rules, anomaly model, risk-score model | The same three layers, with calibrated probabilities |
| Alerts sized to investigator capacity | Precision and recall at the alert volume your team can review |
| Regulator asks for proof the system works | An open benchmark with independently checked labels |
How Agent Monitoring is designed, from capturing activity to deciding what to do about it.
Every security team works to an alert budget. This illustration shows the trade-off Agent Monitoring is designed to improve: catching more harmful actions for the same number of alerts. Drag across the chart or use the slider.
Illustrative curves for explanation only. They are not measured results; pilots from 2027 will measure real performance.
Each profile will show why a decision was reached and which NCSC controls are in place, checked against what the agent actually did.
Each call will be checked before it runs. Risky calls wait for a person, and dangerous ones are blocked, with the reasons recorded.
from agent_monitoring import Engine, Monitor
monitor = Monitor(Engine.load("model/"), approver=ask_a_human)
@monitor.tool("reply_customer", agent_id="support-01",
session_id=session, data_classes=("pii",),
egress=lambda to, body: to.split("@")[1])
def reply_customer(to, body):
...We are looking for UK organisations already running AI agents to help shape Agent Monitoring and to pilot it from 2027.
Talk to us about a pilot:
hello@bara-labs.com