Thales

Thales released new AI Agent security governance and autonomous WAAP capabilities, including an AI security control plane, an Agent registry, letters of authorization, policy enforcement, and the three-layer structure of autonomous WAAP.

Thales's AI governance solution places itself at the center of all data flows between Agents and LLMs, MCP servers, and data sources, governing and intercepting every interaction.

Thales AI Agent governance includes three types of configuration: the Agent registry (containing identities and credentials), letters of authorization (limiting the maximum amount per claim), and policies (which can be generated from natural language prompts and translated into deterministic rules).

Thales's Agent governance capabilities are now open for early access and Beta testing.

Autonomous WAAP is a protection solution that understands, reasons about, and adapts to each application context at machine speed, while being constrained by human-set guardrails, and its structure includes three layers: a unified security engine cluster, an MCP server unified operations entry point, and AI threat intelligence plus a self-improving WAF.

Thales's unified security engine cluster includes the Agent guardrail engine, the MCP protection engine, the intent detection engine, and the AI Bot and Agent trust control engine.

Thales's N-day vulnerability protection technology (machine-speed virtual patching) is applying for a patent.

Thales's self-improving WAF adopts a red-team/blue-team approach: red-team Agents continuously generate thousands of attack variants and evasion techniques, blue-team Agents generate new defenses, looping until the system is hardened.