Okta Identity Security Posture Management (ISPM) release announcements

Subscribe to RSS

Released on November 4, 2026.

Generally Available features

Endpoint shadow AI agent discovery through CrowdStrike

By integrating CrowdStrike Falcon EDR to ISPM, security admins can now detect which employee endpoints are running AI agents, which MCP servers each agent reaches, and which person each one belongs to. This closes critical security gaps without requiring new sensor deployments. New ISPM inventory pages are now available:

  • Endpoint agents: every detected agent per device, along with the MCP servers and MCP activity tied to that agent
  • MCP servers: every MCP server with endpoint activity, aggregated in one place across the whole org

See Connect CrowdStrike Falcon.

This feature is now Generally Available to ISPM and Okta for AI Agents customers.