Box Unveils the Next Generation of Enterprise AI with New Agentic Workflow Automation and Advanced Threat Detection

Box (BOX) unveiled Box Architect for AI-driven workflow automation and new threat protection capabilities, alongside agent security controls now available.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Announces Box Architect to reimagine business processes with frontier AI, helping teams automate critical content-driven workflows

Unveils new threat protection capabilities to help detect and respond to agentic attacks targeting enterprise content

Delivers agent security controls to help govern AI access to enterprise content and guard against malicious agent activity, now available

REDWOOD CITY, Calif.--(BUSINESS WIRE)-- Box, Inc. (NYSE: BOX), the leading Intelligent Content Management (ICM) platform today announced new capabilities to transform how organizations put agents to work across their most critical business processes. Box unveiled Box Architect for autonomously building, managing, and optimizing agentic workflows, redefining how organizations deploy AI on their most critical processes. With Architect, teams will be able to leverage frontier AI to create new workflows and apps, configure agents, connect to Box tools, and manage workflows at scale – all built on their trusted content and existing permissions in Box. In tandem, Box is also building new threat protection capabilities to help detect and contain agent attacks such as bulk exfiltration and account takeover. These increased security measures will complement Box’s agent security controls, which are now available and help govern what agents can access and do with enterprise content. Today’s new features will be unveiled at BoxWorks 2026 in San Francisco.

“The real opportunity with AI is not just helping individuals work faster, but rethinking how entire business processes get done,” said Aaron Levie, co-founder and CEO of Box. “Until now, putting AI to work across those processes has often required specialized expertise and significant effort, but breakthroughs like OpenAI’s Astra and Anthropic’s Fable are changing what’s possible. That’s why we’re building Box Architect - to help teams turn these advances in frontier AI into workflows that bring together agents, people, and content. At the same time, as agents become more capable and the threat landscape grows more complex, organizations need to advance security alongside innovation. Box is helping them do both by protecting enterprise content and giving organizations the confidence to explore what’s possible with AI.”

Introducing Box Architect

Organizations of every size and industry are seeing the potential for AI to transform their business processes, but deploying agentic workflows at scale can be complex, costly, and requires careful oversight. With Box Architect, teams will be able to deploy agents to transform complex business processes into collaborative and repeatable workflows, while keeping people involved at key decision points.

Box Architect will give teams the ability to deploy autonomous agents across the files and tools they already use in Box to create a unified process, drawing on capabilities such as Box Extract, Box Automate, Box Apps, Box Forms, and more. Customers will also have the flexibility to choose from leading models, including Anthropic, OpenAI, Google, NVIDIA, IBM, and more, selecting the right model for each workflow step - from lower-cost models for simpler tasks to more advanced models for complex reasoning. Throughout these workflows, the content will remain in Box, governed by existing permissions and policies, with security controls that help organizations manage agent access and activity.

With Box Architect, users will be able to:

• Design workflows by describing a process or goal in plain language. Box Architect uses content and procedures already in Box to define stages, decisions, and handoffs, with every step governed by existing permissions, classifications, and retention policies;
• Test workflows before they go live using real content and edge cases. Teams can preview agent outputs and routing, add human review and approvals at key decisions, and choose the right model for each step to move from pilot to production with confidence;
• Deploy complete workflows with the Box Apps, agents, automations, forms, and document templates each process needs. Box Architect monitors results and recommends improvements, while administrators publish and standardize workflows across the enterprise.

Box Architect will bring the context held in Box into enterprise critical workflows across industries:

• Law firms will be able to ask Box Architect to build a contract review workflow that learns the company's approved playbook from past agreements, compares incoming contracts against it, flags exceptions, and routes high-risk clauses to attorneys for final review;
• Banking organizations will be able to turn client onboarding into a single connected workflow that collects applications through Forms, verifies documents with Extract, generates and signs agreements with Doc Gen and Sign, and starts account setup with Automate;
• Government agencies will be able to use Box Architect to build a permitting workflow that checks applications for completeness, extracts key details from plans and supporting documents, requests missing items, and routes applications for reviewer approval, all under existing records retention policies;
• Insurance companies will be able to orchestrate claims processing by collecting information through Forms, extracting details from supporting documents, generating claim summaries, and routing settlement documents for signature in a connected workflow;
• HR agencies will be able to build an agentic workflow for employee onboarding that reviews packets, extracts key information, requests missing details, routes exceptions for review, and moves approved files into the next step.

“Enterprise AI maturity is moving beyond isolated conversational interfaces into autonomous process orchestration grounded in enterprise content,” said Alan Pelz-Sharpe, Founder, Deep Analysis. “While legacy approaches require brittle point-to-point configurations for extraction and execution, an integrated agentic design layer dynamically orchestrates content understanding, process steps, and analytical visualization within a single governed ecosystem. This enables organizations to drive measurable business transformation rather than fragmented tactical automation.”

Protecting enterprises in the age of agentic threats

As employees, external collaborators, applications, and agents access and act on enterprise content, organizations face an expanding attack surface that demands stronger security and governance. Box extends protection at the content layer across these interactions, helping organizations defend against threats, enforce content access controls, and apply guardrails to agents wherever they work.

As agentic threats evolve, Box is building new innovations in threat protection to help organizations detect and respond to attacks targeting enterprise content, including bulk exfiltration, session hijacking, account takeover, and mass deletion. These capabilities are designed to empower enterprises to:

• Detect anomalous downloads faster and automatically restrict them, helping stop bulk exfiltration sooner;
• Strengthen protection against session hijacking and account takeover with session binding and device-bound session credentials, helping prevent stolen tokens or sessions from being replayed on another device;
• Identify suspicious sharing and mass deletion, which can precede data exposure, exfiltration, or destruction;
• Apply automatic, severity-based responses, from restricting downloads to requiring step-up authentication or terminating a session.

Available today: agent security controls

Alongside these new threat detection capabilities, Box is also delivering enhanced security controls to help protect enterprise content from unauthorized agent action. As agents gain the ability to access and act on sensitive data, these controls add protections against activity that could exfiltrate, expose, or delete content. Now available, these controls allow users to:

• Control what agents can access with classification-based policies that govern agents and the classified content available to them, helping prevent agents from reaching sensitive information they don’t need;
• Constrain agent actions with MCP Guardrails that let Box admins set boundaries on the tools agents can use, including creating, moving, and sharing content externally, helping prevent unauthorized or risky changes;
• Detect potentially harmful activity with threshold-based policies that alert teams when agent actions exceed customer-defined limits, helping teams intervene before malicious activity causes widespread damage.

Pricing and Availability

Box Architect will begin rolling out to Enterprise Advanced customers in beta in Q4. The new threat protection capabilities will be available to Enterprise Advanced and Shield customers early next year, and the agent security controls are now generally available to Shield customers and those on Enterprise Advanced plans. For more information, visit the Box blog.

Forward-Looking Statements

This press release contains forward-looking statements that involve risks and uncertainties, including statements regarding Box Architect, its planned product features and future enhancements, and the market adoption and benefits of such product features and enhancements. There are a significant number of factors that could cause actual results to differ materially from the statements made in this press release, including: (1) adverse changes in general economic or market conditions; (2) Box’s ability to partner with third parties to integrate AI technologies with Box’s Intelligent Content Management platform; (3) delays or reductions in information technology spending; (4) the risk that Box’s customers do not renew their subscriptions, expand their use of Box’s services, or adopt new products or features offered by Box on a timely basis, or at all; (5) Box’s ability to provide timely and successful product introductions, enhancements, new features and modifications to its platform and services; and (6) actual or perceived security vulnerabilities in Box AI or other Box services or any breaches of Box’s security controls. Any unreleased services or features referenced in this or other press releases or public statements are not currently available and may not be delivered on time or at all. Customers who purchase Box products should make their purchase decisions based upon features that are currently available. Additional information on potential factors that could affect Box’s financial results is included in the reports on Forms 10-K, 10-Q and 8-K and in other filings Box makes with the Securities and Exchange Commission from time to time. These documents are available on the SEC Filings section of Box’s Investor Relations website located at www.boxinvestorrelations.com. Box does not assume any obligation to update the forward-looking statements contained in this press release to reflect events that occur or circumstances that exist after the date on which they were made.

About Box

Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. Founded in 2005, Box simplifies work for leading global organizations, including JLL, Morgan Stanley, and Nationwide. Box is headquartered in Redwood City, CA, with offices across the United States, Europe, and Asia. Visit box.com to learn more. And visit box.org to learn more about how Box empowers nonprofits to fulfill their missions.

View source version on businesswire.com: https://www.businesswire.com/news/home/20261105710957/en/

Investor Relations:
Cynthia Hiponia and Stefany Flegal
ir@box.com

Comms:
Madeline Gile
press@box.com

Source: Box, Inc.

Key Terms

bulk exfiltration technical

Unauthorized transfer of large volumes of data from an organization’s systems or networks to an external location. Bulk exfiltration typically involves automated tools or scripted processes that collect many files, databases, or records at once (or continuously over time), often using encryption, compression, or covert channels to avoid detection; it describes the scale and method of data removal rather than the initial intrusion technique or the specific data types taken.

session hijacking technical

Session hijacking is when an attacker takes control of an ongoing digital session by stealing or guessing the temporary credentials (like session cookies or tokens) that prove a user is logged in. Think of it as someone grabbing your concert ticket while you’re inside and impersonating you; for investors, it matters because it can enable unauthorized trades, expose sensitive account data, disrupt services, and cause regulatory and reputational harm.

account takeover technical

An account takeover occurs when an unauthorized person gains control of a customer or company account—such as banking, trading, email, or user portals—usually by stealing passwords or bypassing security. It matters to investors because these incidents can cause direct financial loss, damage trust and brand value, trigger regulatory fines, and reveal weaknesses in a company’s controls; think of it like someone stealing the key to a mailbox and rifling through bills and instructions.

step-up authentication technical

Step-up authentication is an extra security check triggered when a user tries to perform a higher-risk action, like moving large sums, changing payment details, or accessing sensitive data. Think of it as a bank teller asking for additional ID for a big withdrawal; it helps prevent fraud and meets regulatory requirements, but can also slow or deter transactions, so investors watch it for its impact on fraud losses, customer experience, compliance costs and revenue friction.