Box announces new controls to secure AI threats and automate content governance

Box announced security and governance enhancements at BoxWorks 2026 aimed at helping organizations protect enterprise content and manage its lifecycle as AI agent adoption expands. Planned threat-protection features include detection of unusual downloads, compromised sessions, suspicious sharing, and mass deletion, while adaptive response tools can require additional verification, restrict downloads, or terminate high-risk sessions. Box Agent Security adds classification-based content access policies, MCP Guardrails for agent write actions, configurable download thresholds, and planned session governance and audit trails. The company also introduced Box Records, which will enable organizations to define records and retention policies, automate record declaration, and oversee disposition within Box, and Box Automated Archive, which will archive content automatically when defined business events occur. Classification-based policies, MCP Guardrails, and threshold alerts are generally available, while additional agent controls, records management, archiving, and threat protections are scheduled for phased releases through early 2027.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.