DigiCert launches AI Trust Manager to govern autonomous agents

The new solution, part of the DigiCert ONE platform, gives enterprises tools to discover AI agents, establish verifiable identity and ownership, control permissions, verify authority across organisations, and revoke access when trust changes.

DigiCert has announced the general availability of DigiCert AI Trust Manager, a new solution within its DigiCert ONE platform designed to help organisations establish greater control and accountability over AI agents operating across enterprise environments.

The solution addresses the growing adoption of autonomous AI agents, which can access sensitive information, interact with software tools, generate code, make decisions and execute transactions with limited human intervention. As these systems increasingly operate across applications, cloud environments and organisational boundaries, enterprises face new challenges around identity, permissions and accountability.

Addressing emerging AI security risks

According to a DigiCert survey conducted in July 2026 among 1,001 IT and cybersecurity leaders, 78% of respondents said their organisations had experienced an AI-related security incident or identified an AI vulnerability during the previous year.

“For more than two decades, DigiCert has provided the cryptographic infrastructure that helped the internet scale,” said Amit Sinha, CEO of DigiCert. “We are now bringing that proven trust model to AI agents so organizations can verify who they are, who owns them, and what they are authorized to do.”

At the centre of DigiCert AI Trust Manager is the DigiCert AI Passport, a portable, cryptographically signed credential designed to verify an AI agent's identity and associate it with an accountable owner. The solution also uses policy-based “visas” to establish which systems, data and actions an agent can access and the duration of that authority.

Portable identity and policy-based controls

The AI Passport and associated permissions are designed to travel with the agent, allowing other systems and organisations to independently verify its identity and authority without requiring the same identity provider. A receiving organisation can also determine whether an agent should be granted access within its own environment.

The platform includes an automated kill switch that can block prohibited actions. Based on policies established by the agent's owner or passport issuer, its authority can also be revoked at the source and the agent quarantined when a security or trust concern emerges.

DigiCert AI Trust Manager provides enterprises with capabilities to discover AI agents that have been purchased, developed internally or are already operating within their environments. It also associates agents with accountable owners to improve visibility and governance.

Organisations can define the systems, data and actions an agent is permitted to access, while establishing how long those permissions remain valid. The platform is also designed to support trust verification between organisations without requiring them to rely on a common identity provider.

When trust conditions change, enterprises can update credentials, allow permissions to expire or revoke access for individual agents or groups of agents based on policies and emerging risks.

“Enterprise AI buying has moved from trust to proof. Buyers are ranking verifiable security controls as their top priority and name unverifiable vendor claims as their top frustration,” said Grace Trinidad, Research Director, AI Security and Trust, IDC. “Cryptographic identity, attestation, and revocation for agents, models, and MCP servers are the machinery that produces this proof, which in turn produces trust, and DigiCert is pointing the identity discipline the internet already runs at scale at exactly that problem."

Extending digital identity to agentic AI

“As AI agents become more embedded in enterprise workflows, establishing clear identity and accountability will be essential to deploying them responsibly at scale,” said Ajitha Choudary, Vice President of Global Security Engineering & IAM at UKG. “We see DigiCert AI Trust as a promising approach to extending proven principles of digital identity to this new class of autonomous systems. The ability to verify an agent’s identity, define what it is authorized to do, and maintain visibility into its actions could give organizations the foundation they need to adopt agentic AI with greater confidence.”

DigiCert AI Trust Manager forms part of DigiCert's broader AI trust architecture, which applies cryptographic verification across AI agents, models and content. The company said the solution is designed to complement existing identity and cybersecurity infrastructure by providing a portable foundation for verifying an agent's identity and authority wherever it operates.