Government Gets a New Lens on AI Agents in Digital Services

AI agents are moving into government services, and agencies now have a new way to see them. On November 10, 2026, LexisNexis Risk Solutions announced that Know Your Agent intelligence is available with ThreatMetrix and BehavioSec for government agencies, adding AI-agent activity to digital identity and fraud decisions.
The timing reflects a fast-changing digital environment: LexisNexis Risk Solutions recorded 750% growth in agentic traffic during the first half of 2026. When software can act inside an online service, knowing the identity of the person behind an interaction may no longer answer the full risk question.
Government Systems Must Identify More Than People
Government identity and authentication controls were built to establish that the person using an online service is who they claim to be. An AI agent introduces another participant, so detecting its presence becomes one part of the risk decision. The agency also needs to know who the agent represents and whether its actions are authorized.
The government-focused capabilities are designed to distinguish among human users, conventional automated bots and AI agents. That distinction addresses a basic identification problem: many personal agents do not currently declare themselves as agents, making it harder for an agency to determine who or what is acting inside its digital environment.
Within ThreatMetrix and BehavioSec, digital identity, device, behavioral and network intelligence can help identify recognized AI-agent signatures and other indicators of agent-driven activity. KYA brings that signal together with transaction intelligence inside established risk-assessment and decisioning workflows.
That approach does not turn agent detection into a universal instruction to block automation. Instead, agent presence becomes one consideration in a broader assessment that also includes identity verification, authentication, fraud-prevention and cybersecurity controls.
One Signal, Many Government Decisions
Agencies can evaluate agentic activity in the context of the wider interaction, then decide how to handle it under their own policies, risk tolerance and the sensitivity of the service or transaction. The same signal could inform a decision about an account login or a public-funds disbursement, with the response varying according to the risk involved.
Supported interactions include:
- Benefits and program access
- Digital-service enrollment
- Authentication and account access
- Payments and disbursements
- Individual self-service
A low-risk self-service interaction may call for a different response than a sensitive payment or disbursement. That flexibility gives agencies room to evaluate what the agent is doing, who it represents and whether the action fits the rules governing the service.
“The real measure is whether an agency can protect the citizen, the transaction and the public funds behind it,” said Haywood Talcove, CEO of LexisNexis Risk Solutions Government.
LexisNexis describes KYA as a protocol-agnostic foundation that can evolve with agents, technical standards and government use cases. The government announcement follows the broader Know Your Agent launch on November 5, 2026, when LexisNexis Risk Solutions added agentic insights to its digital identity and fraud-prevention platform for organizations generally. That release said many customers were already using KYA intelligence in risk-management decisions; the new announcement specifies government availability, agency workflows and public-service applications.
The Broader Identity and Security Pressure
The challenge extends beyond government portals. Bots now generate over 57% of all web traffic, compared with less than 43% of human activity, and that share is set to expand as agentic AI proves its mettle in online shopping, research, cloud administration, customer service and more.
Enterprise security systems were designed to give approved human users access while blocking human and machine intruders. That model faces pressure when an AI agent can browse, act and complete tasks without clearly identifying itself.
In September, Amazon began blocking Muse, Meta’s new personal AI agent. One of Amazon’s complaints was that the agent does not identify itself when it browses. That same week, DataDome published a year of traffic data showing that the most impersonated identity on its network, with 12.7 million forged requests in July, was Meta’s own crawler.
Silence fails because a gate cannot assess a visitor it cannot identify. A claim of identity can fail too, because any visitor can claim to be someone else. Verification helps, but it has limits: verification can establish identity without establishing conduct.
Other technology announcements on November 10, 2026 point to the same push for stronger control and clearer insight. One Identity unveiled Identity Manager 10.0 LTS, which modernizes identity governance with browser-based administration, AI-assisted insights and streamlined automation for everyday identity operations. Its new browser-based experience provides administrative functionality without requiring a traditional local desktop installation, giving it the clearest UI modernization story among the three products mentioned.
Acronis also announced the inaugural Acronis TRU Cyber Pulse 2026. Produced by the Acronis Threat Research Unit, the report examines threat actor techniques, behaviors and objectives shaping today’s cybersecurity and data protection landscape, including emerging attack techniques, advanced persistent threats, espionage activity and cybercrime. It connects research findings to practical guidance and gives particular attention to managed service providers and the organizations they support.
Across identity governance, threat research and public-service access, the direction is clear: digital systems must understand not just whether a credential is valid, but what kind of participant is acting and what that participant is doing. KYA gives government agencies a new signal for that assessment, while leaving the final decision with each agency’s policies, risk tolerance and responsibility to protect citizens and public funds.
Based on
- LexisNexis Risk Solutions Brings AI-Agent Detection to Government — unite.ai
- One Identity Unveils Identity Manager 10.0 LTS with AI and Modern UX | Currency News | Financial and Business News | Markets Insider — markets.businessinsider.com
- Acronis Debuts First TRU Cyber Pulse Report, Mapping Modern Cyber Threats in 2026 and Beyond | Markets Insider — markets.businessinsider.com
- AI Agents Behaving Badly: Four Security Rules For The Agentic AI Age — forbes.com
- Why Certified AI Agents Still Get Turned Away — forbes.com



