AI already runs inside your organization. It’s in the tools your teams open every day, the code your developers ship, and the agents starting to act without a person approving every step. According to the 2026 AI Risk and Readiness Report, AI is deployed in 73% of organizations, while only 7% have governance in place for it.
Over the past year we have been building and launching a whole suite of AI security components, delivered inside the Netskope One platform to address this challenge. As the suite has grown, it became appropriate to give it a unifying name in order to recognise the extent of the offering; giving security teams one place to see and control AI use across employees, self-hosted models, agents, and data, instead of stitching that view together from different tools.
Netskope Skylight provides a complete picture and a unified control plane to secure your entire AI landscape.
Built on the Netskope One platform
Skylight doesn’t ask you to stand up a new stack. The Netskope One platform stays exactly as it is: the Zero Trust Engine for dynamic risk context, the NewEdge Network for connectivity and performance, one client to run, and one console to manage. Skylight’s components plug into that same unified platform, so a policy set in one place applies everywhere AI shows up.
Agent Action Control: the coverage you need for the next chapter
As well as getting a new name, today the Skylight suite was extended to cover yet another risk vector.
Agents are the newest and fastest-moving part of the AI risk picture. We are seeing AI agents that can read files, open a terminal, and push changes on their own proliferate throughout engineering teams (and agents are fast getting into the hands of non-technical teams too). In fact, earlier this year nearly 38% of organizations said they already had more than 100 agents deployed, and 81.7% of organisations plan to deploy more agents in the next 12 months. The actions of these agents require serious controls; and while some rogue agents make the headlines, even supposedly intended actions may be undesirable. Agents at risk of ‘authority drift’ (the term used when an AI agent’s permission footprint expands beyond what was originally approved), or whose harness or instructions are too vague or permissive are a significant and growing risk within the enterprise.
Yet 91% of organizations cannot stop a risky agent action before it executes.
And so today we’re launching Netskope Skylight Agent Action Control, the newest component in our AI security suite, built to classify the intent behind what an agent is trying to do, assign a risk level based on what it touches, and set granular policy profiles by agent type to allow, alert or block an action before it executes rather than after.
We built Agent Action Control the same way we built everything else in Skylight: inside the platform you already run, not as a separate tool with its own console to manage. Agent Action Control is the proof of how fast our unified suite is moving to keep your AI strategy moving forward securely. To go deeper on how these new capabilities work, read today’s companion blog dedicated to the new product.
Skylight: The full view
Here’s how Netskope Skylight secures AI across every stage of use: with a unified approach to discovery, governance, and protection, all from one control plane.
- Discover: 94% of organizations report gaps in AI activity visibility, and only 6% have complete visibility into their AI pipeline. Skylight discovers every user, app, model, agent, and data flow, in the cloud, on the endpoint, and across the network, building one inventory instead of partial view