Workday Launches Agent Passport to Test, Verify, and Continuously Monitor Every AI Agent in the Enterprise
Rhea-AI Summary
Workday (NASDAQ: WDAY) introduced Agent Passport, a framework to test, verify, and continuously monitor every AI agent used in HR, finance, and IT. Attestations are tied to public standards such as OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS.
Cisco joins as launch partner, using Cisco AI Defense to independently validate agents against threats like prompt injection, jailbreaks, goal hijacking, data leakage, and unsafe outputs. Agent Passport can allow, block, or route agent actions in real time and revoke compromised agents centrally. Early access starts in the second half of 2026, with general availability projected before year-end 2026.
AI-generated analysis. Not financial advice.
Positive
- Launch of Agent Passport to test and monitor all enterprise AI agents
- Attestations aligned with OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS
- Independent agent security validation via partnership with Cisco AI Defense
- Real-time policy engine to allow, block, or route AI agent actions
- Centralized revocation capability to restrict affected agents across the enterprise
- Early access and general availability timelines communicated for 2026
Negative
- Agent Passport not available until second half of 2026 for early access
- General availability only projected by end of 2026, delaying broad adoption
Key Figures
Market Reality Check
Peers on Argus
Momentum scanner shows 3 peers (e.g., TEAM, DDOG, MSTR) moving down with changes from -3.83% to -9.36%, indicating broader sector pressure even as several software peers in the watchlist show notable positive moves.
Previous AI Reports
| Date | Event | Sentiment | Move | Catalyst |
|---|---|---|---|---|
| May 27 | AI planning launch | Positive | +0.4% | Introduced Adaptive Decision Intelligence in Workday Adaptive Planning with early adopter access. |
| May 27 | AI workplace study | Positive | +0.4% | Released Human Connection Workplace Index on AI, burnout, and launched $500,000 microgrant initiative. |
| May 12 | AI accelerator launch | Positive | -1.8% | Announced AI-focused solopreneurship accelerator with seed funding and AI training support. |
| Apr 21 | AI-first deployment | Positive | -2.2% | EZE Cloud Consulting completed AI-first deployment of Workday HCM and Financial Management. |
| Apr 16 | AI rewards launch | Positive | +0.6% | Launched AI-powered recognition and rewards solution with Achievers integrated into Workday HCM. |
Recent AI-related headlines have produced mostly modest price reactions, with a mix of aligned and divergent moves versus generally positive AI narratives.
Over the past few months, Workday has maintained a steady cadence of AI-focused announcements. Recent AI items include Adaptive Decision Intelligence, research on AI and workplace connection, community-focused AI accelerator programs, and AI-driven recognition and rewards offerings. Price reactions to these AI updates have generally been modest, with a mix of small gains and declines. Today’s Agent Passport announcement extends this pattern of expanding the AI and agentic security stack on top of Workday’s core HR and finance platforms.
Historical Comparison
In the past few months, Workday has released multiple AI-tagged updates averaging a -0.52% move. Today’s Agent Passport AI security announcement fits this ongoing AI platform expansion theme.
AI news has progressed from engagement and recognition tools to planning intelligence, research on AI’s workplace impact, and ecosystem/accelerator programs, now extending into agent security and governance.
Regulatory & Risk Context
Workday has an effective Form S-3ASR shelf dated May 29, 2026, registering an unspecified amount of various securities with no stated aggregate limit. Specific terms and sizes would be defined in future prospectus supplements as offerings are launched.
Market Pulse Summary
This announcement introduces Agent Passport, a framework to test and continuously monitor AI agents against standards like OWASP LLM Top 10 and NIST AI RMF. It extends Workday’s AI strategy into agentic security, with Cisco as a launch partner and early access planned for the second half of 2026. In context of recent AI launches and partnerships, investors may watch adoption levels, integration breadth across HR and finance workflows, and any follow-on disclosures tied to the active S-3ASR registration.
Key Terms
owasp llm top 10 technical
nist ai rmf regulatory
mitre atlas technical
prompt injection technical
data leakage technical
AI-generated analysis. Not financial advice.
Agent Passport Measures Every Agent Against Industry Standards Including OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS
Cisco Joins as Launch Partner to Independently Test AI Agents in Workday Using Cisco AI Defense
Agent Passport gives companies a verified record that every agent has been tested against the most serious risks before it goes into production, including prompt injection, jailbreak and goal hijacking, system prompt extraction, leaks of employee data, and unsafe outputs. Each test result is tied to a public standard and signed by the partner that performed it, so the record is independent, auditable, and comparable across agents from any vendor.
When an agent attempts to execute a task, Agent Passport will monitor in real time and either allow, block, or route the action accordingly. If a problem is discovered, a single revocation can automatically stop, limit, or otherwise restrict affected agents based on company policy.
"AI agents are now doing the most sensitive work in the enterprise, from onboarding employees to processing payments, and one insecure agent can leak employee data, break compliance, and put the company on the front page for the wrong reasons," said Dean Arnold, vice president, AI Platform, Workday. "Agent Passport gives companies confidence that every agent has been independently tested and verified, and the power to shut any of them down across the business the moment something changes."
A Shared Standard, Built with Industry Leaders
Most platforms that offer agent security testing do it themselves, which means customers receive a "safe" label from the same vendor that built the agent. Workday has built extensive trust with customers with its broad portfolio of AI solutions for HR and finance. The company is building on that trust through open standards and partnership with leading vendors in agentic security and regulatory compliance, so the testing is independent and open, and the results are comparable across agents from any vendor.
Each agent's record has three layers. The first covers the broad areas of trust that Workday defines and keeps current, such as protection against attacks, safe behavior at runtime, and human oversight. The second is a set of specific, testable claims tied to public standards, like resistance to known attack techniques. The third is the signed results from the partner that performed the testing, issued by verified, trusted attestors starting with Cisco.
Because every check is tied to a public standard, security teams can compare agents from different vendors on the same terms for the first time. If two agents carry the same check from two different partners, companies know they were held to the same bar.
Independent Attestations from Industry Leaders in Agentic Security
Cisco is the launch partner for Agent Passport, bringing Cisco AI Defense to independently test AI agents running in Workday against leading security standards before deployment and continuously protect them at runtime against prompt injection, data leakage, jailbreaks and unsafe actions.
Cisco AI Defense confirms the agent resists attempts to override its instructions, keeps its own instructions from being exposed, protects sensitive employee information from leaking, and blocks harmful or policy-violating responses before they reach a user. These validations are important for any agent, but are non-negotiable for agents operating on payroll, benefits, and financial data.
"Agents are going to be everywhere in the enterprise, and that only works if security teams have a clear, signed record of what each one has been tested for," said DJ Sampath, senior vice president and general manager, AI Software and Platform, Cisco. "Cisco AI Defense was built for exactly this kind of validation, and we're excited to partner with Workday to secure the agentic workforce."
Availability
Agent Passport will be available to early access customers in the second half of 2026, and general availability is projected before the end of 2026. The Workday and Cisco partnership is active today, with joint capabilities rolling out over coming quarters.
For More Information
- Discover how Workday and Cisco are partnering to define enterprise agentic security.
- Read how Workday Build is now agent-ready, empowering developers to build, connect, and verify AI agents for HR, finance, and IT.
- Learn how the latest expansions to Workday Data Cloud allow developers to securely bring live HR and finance data into their existing AI, analytics, and applications without rebuilding data pipelines.
- Explore the three paths to build AI apps and agents with Workday, without giving up control or safety.
About Workday
Workday operates at the heart of the enterprise – HR, finance, and IT – where the margin for error is effectively zero. By tightly coupling AI with the context, guardrails, and trusted processes that run the business, Workday goes beyond AI that assists work to agents that do the work and drive measurable outcomes. More than 11,500 organizations worldwide, including more than
© 2026 Workday, Inc. All rights reserved. Workday and the Workday logo are trademarks of Workday, Inc. All other brand and product names are trademarks or registered trademarks of their respective holders.
Forward-Looking Statements
This press release contains forward-looking statements including, among other things, statements regarding Workday's plans, beliefs, and expectations. These forward-looking statements are based only on currently available information and our current beliefs, expectations, and assumptions. Because forward-looking statements relate to the future, they are subject to inherent risks, uncertainties, assumptions, and changes in circumstances that are difficult to predict and many of which are outside of our control. If the risks materialize, assumptions prove incorrect, or we experience unexpected changes in circumstances, actual results could differ materially from the results implied by these forward-looking statements, and therefore you should not rely on any forward-looking statements. Risks include, but are not limited to, risks described in our filings with the Securities and Exchange Commission ("SEC"), including our most recent report on Form 10-Q or Form 10-K and other reports that we have filed and will file with the SEC from time to time, which could cause actual results to vary from expectations. Workday assumes no obligation to, and does not currently intend to, update any such forward-looking statements after the date of this release, except as required by law.
Any unreleased services, features, or functions referenced in this document, our website, or other press releases or public statements that are not currently available are subject to change at Workday's discretion and may not be delivered as planned or at all. Customers who purchase Workday services should make their purchase decisions based upon services, features, and functions that are currently available.
View original content to download multimedia:https://www.prnewswire.com/news-releases/workday-launches-agent-passport-to-test-verify-and-continuously-monitor-every-ai-agent-in-the-enterprise-302787979.html
SOURCE Workday Inc.