AI agents aren’t just hype, they’re in production and they’re hitting a growth spurt.
James White, VP of Engineering at F5, makes a powerful observation: if you want to understand agents, don’t think in terms of software versions, think in terms of human development. An agent isn’t v1.0, it’s an entity—a digital one—that has the potential to be productive but also needs nurturing.
The Maturity Curve of Agents
Like humans, agents need constant attention in their early stages. Much like a newborn that can’t yet feed itself, they’re more promise than utility. But babies learn to feed themselves and grow quickly into children and adults. Likewise, with better models, tooling, and security infrastructure, agents start contributing with meaningful impact.
Today, we’re at the “cutting the grass” moment, when a child starts taking on chores and making life easier for the adults in the room. Agents can now handle defined tasks independently, whether it’s generating research, coding with GitHub Copilot, or shopping online through Google’s new agent interfaces. They’re growing and maturing with knowledge, expertise, and capability.
Enter the Era of Non-Human Resources
This evolution is forcing a mindset shift in enterprise security, which is set up to protect IT systems and services from human activity. Much like human employees, agents will need specific access control and privileges as they roam through your digital environment.
What will that shift look like? Think about it this way: we created human resource departments to manage human contributors. Agents can be considered as non-human resources—NHRs—capable of doing real, valuable work in organizations around the globe.
The current agents are at a graduate level of experience and output, but they will soon improve to the equivalent of mid-level and senior roles, with related responsibilities. The NHR requirements will go up: they will cost more, they will need better access and more security.
That means companies will need:
- Policies for agent access and permissions
- Cost tracking and ROI frameworks for agent deployment
- Security standards specific to agentic behavior and lateral movement risks
Why Security Must Grow Up Too
The catch? We can’t treat these agents like traditional software. Their autonomy, ability to act, and potential to collaborate means they introduce a fundamentally new attack surface.
Considering the analogy of human development, you wouldn’t wrap a baby in bubble wrap so tight they can’t move. In the workplace, you don’t keep young employees on a leash or under surveillance. Instead, you set boundaries that allow them to grow safely and gain experience.
That’s exactly what F5 AI runtime security solutions do for AI apps and agents. We don’t slow down agents, but serve as the bodyguard that’s ready to intercept when threats appear.
What’s Next?
As AI agents become more autonomous, more integrated, and more capable, they’ll stop being abstract ‘agents’ and simply start being part of the team. We know, because we build our own agents and use them in production. They do valuable work as non-human resources.
But agents that have access and ability need oversight, controls, and visibility just like any other resource. The companies that win won’t be the ones who build the fastest agents—they’ll be the ones who build the safest ones.
F5 is securing this new workforce of non-human resources. Because innovation without protection isn’t progress: it’s risk.
About the Author
Related Blog Posts

Securing the public sector against Shadow AI with F5 BIG-IP SSL Orchestrator
Learn how state, local, and education organizations can enhance visibility and security in encrypted network traffic while addressing compliance and governance.

F5 secures today’s modern and AI applications
The F5 Application Delivery and Security Platform (ADSP) combines security with flexibility to deliver and protect any app and API and now any AI model or agent anywhere. F5 ADSP provides robust WAAP protection to defend against application-level threats, while F5 AI Guardrails secures AI interactions by enforcing controls against model and agent specific risks.

Govern your AI present and anticipate your AI future
Learn from our field CISO, Chuck Herrin, how to prepare for the new challenge of securing AI models and agents.

New 7.0 release of F5 Distributed Cloud Services accelerates F5 ADSP adoption
Our recent 7.0 release is both a major step and strategic milestone in our journey to deliver the connectivity, security, and observability fabric that our customers need.

Stay ahead of API security risks with our latest F5 Distributed Cloud Services release
This release brings exciting, new API discovery options, expanded testing scenarios, and enhanced detection capabilities—all geared toward reducing API security risks while improving overall visibility and compliance.

F5 provides enhanced protections against React vulnerabilities
Developers and organizations using React in their applications should immediately evaluate their systems as exploitation of this vulnerability could lead to compromise of affected systems.