Agent Anomaly Detection, now in Private Preview on the Gemini Enterprise Agent Platform

Agent Anomaly Detection, currently in Private Preview for Gemini Enterprise Agent Platform users with ADK 1.2 or later, is an asynchronous oversight and audit capability designed to identify unsafe or unintended autonomous-agent behavior that conventional success metrics may miss. It analyzes existing reasoning traces, tool calls, logs, and OpenTelemetry data to flag suspicious intent, policy violations, and behavioral anomalies without adding latency to live requests, while publishing actionable findings with severity, explanations, and recommended remediation to Security Command Center. Its layered pipeline first identifies statistical outliers across traffic, then uses LLM-based reasoning to examine suspicious sessions in depth and, when necessary, reconstructs detailed tool activity; an inventory-agent example illustrates how repeated large-batch pagination could be recognized as systematic scraping and resource exhaustion despite producing no errors. The service includes detectors aligned with selected OWASP Top 10 for Agentic Applications risks, including tool misuse, privilege abuse, cascading failures, rogue agents, resource exhaustion, and token escalation, and it provides an API that can enable organizations to automatically halt or restrict future agent actions based on configured risk thresholds. Planned additions include natural-language and deterministic custom detectors that organizations can test against historical traffic.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.