Mimecast has unveiled new runtime data security capabilities alongside a preview of its Agent Risk Centre to help address the growing risks posed by AI agents.
The company has unveiled the expansion of its Incydr platform, extending its focus beyond insider threats to address data exposure driven by both human users and autonomous AI systems.

"Intent-based detection treats all agents equally. We don't, because the human behind the agent is the signal that changes everything," said Rob Juncker, chief product officer, Mimecast. "Who deployed the agent? What do we already know about them? How is data moving across email, collaboration tools, browsers, SaaS apps, endpoints, and AI-driven workflows — and what intervention is required right now? That's a runtime data security problem, not a model problem."
Runtime data security
Mimecast's new approach, using "runtime data security", claims to provide real-time visibility and control over how data moves across endpoints, browsers, SaaS platforms, email systems, and AI-driven workflows.
The expanded Incydr features now include unified visibility across human and AI activity, detection of shadow AI and unsanctioned agents, and adaptive risk scoring based on behavioural anomalies and policy violations.
Agent Risk Centre
Mimecast also introduced its Agent Risk Centre, a platform designed to unify fragmented security signals into a single interface.
It also helps integrate automated remediation workflows, enabling organisations to respond to threats in real time by blocking access, notifying users, or escalating incidents.
