Nobody installed the software that now runs your office
On September 20, 2026, in CTech, Shlomi Salem (co-founder and CPO at Neo) writes that an organization's approved software list no longer describes what actually runs. Excel, the browser and code tools have become platforms with plugins and AI agents that perform steps on their own within the user's permissions. The old defenses ask whether the user is authorized, and the answer is always yes because the agent wears their badge. He describes a case of an unapproved AI sales plugin with broad access to customer data. The conclusion: you need to answer whether something is inside, whether its configuration is reasonable, and what it is allowed to do, and enforce this in real time.
Otomatzia editorial · Published
Source published: · CTech
