Every year, security and tech leaders come to the RSA conference in San Francisco to take the industry’s pulse, and every RSAC tends to be dominated by a single, overarching theme. Last year, the theme was: “AI agents are coming, and governance isn’t ready.” And sure enough, the theme of RSAC 2026 was: “AI agents are here, and governance needs to catch up.” Throughout the conference, security practitioners, vendors, and analysts were all asking the same questions: How can we enable a culture of agentic AI builders, without compromising on bedrock security principles? How can we mitigate the…