Microsoft Takes Agent 365 Live to Govern Shadow AI

Microsoft moved Agent 365 out of preview into a cross-cloud control plane that discovers and governs agents across Microsoft, AWS, and Google Cloud, per VentureBeat.

That is the stakes: shadow AI, the agents employees spin up without IT's knowledge, turns into an identity problem rather than a policy one, and Microsoft now tracks it across three clouds instead of just its own.

Local discovery already spans 18 agent types, including GitHub Copilot CLI and Claude Code, per VentureBeat.

Defender ties each discovered agent to its device, its MCP servers, its identity, and the cloud resources it can reach.

The signal underneath is credential scope. Microsoft is pushing scoped OAuth issuance for each agent rather than shared human logins, per VentureBeat. That distinction is what moves an agent from pilot to production.

The take

Enterprise agent governance will be decided by whoever can revoke a rogue agent's OAuth token in one click. Whether Agent 365 governs AWS and Google Cloud agents as tightly as it governs Microsoft's own is worth watching, since the cross-cloud claim could stay thinner than the pitch.

The GA release appears in VentureBeat's July 1 coverage, as enterprises start treating agents nobody explicitly approved as a credential problem instead of a policy memo.