Business
Workday Launches Agent Passport to Test, Verify, and Continuously Monitor Every AI Agent in the Enterprise
Workday DevCon — Workday, Inc. (NASDAQ: WDAY), the enterprise AI platform for HR, finance, and IT, today announced Agent Passport, which tests and verifies every AI agent, Workday-built or third-party, before it goes into production, and continuously monitors it after. Every attestation is tied to a public industry standard, such as OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS, so security teams have a signed, auditable record of what each agent has been tested for and who did the testing.
About this update from Workday, Inc.
Agent Passport Measures Every Agent Against Industry Standards Including OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS Cisco Joins as Launch Partner to Independently Test AI Agents in Workday Using Cisco AI Defense LAS VEGAS, June 2, 2026 /PRNewswire/ -- Workday DevCon — Workday, Inc. (NASDAQ: WDAY), the enterprise AI platform for HR, finance, and IT, today announced Agent Passport, which tests and verifies every AI agent, Workday-built or third-party, before it goes into production, and continuously monitors it after. Every attestation is tied to a public industry standard, such as OWASP LLM Top 10, NIST AI RMF, and MITRE ATLAS, so security teams have a signed, auditable record of what each agent has been tested for and who did the testing. Agent Passport gives companies a verified record that every agent has been tested against the most serious risks before it goes into production, including prompt injection, jailbreak and goal hijacking, system prompt extraction, leaks of employee data, and unsafe outputs. Each test result is tied to a public standard and signed by the partner that performed it, so the record is independent, auditable, and comparable across agents from any vendor. When an agent attempts to execute a task, Agent Passport will monitor in real time and either allow, block, or route the action accordingly. If a problem is discovered, a single revocation can automatically stop, limit, or otherwise restrict affected agents based on company policy. "AI agents are now doing the most sensitive work in the enterprise, from onboarding employees to processing payments, and one insecure agent can leak employee data, break compliance, and put the company on the front page for the wrong reasons," said Dean Arnold, vice president, AI Platform, Workday. "Agent Passport gives companies confidence that every agent has been independently tested and verified, and the power to shut any of them down across the business the moment something changes." A Shared Standard, Built with Industry Leaders Most platforms that offer agent security testing do it themselves, which means customers receive a "safe" label from the same vendor that built the agent. Workday has built extensive trust with customers with its broad portfolio of AI solutions for HR and finance. The company is building on that trust through open standards and partners...