Key Takeaways
- On June 15, 2026, Akamai launched its Agentic Security Framework, tying AI agent identity verification, risk scoring, and edge enforcement into a single real-time decisioning layer
- With "Know Your Agent," merchants can authenticate an AI agent down to whose authorized representative it is, making automated transactions safe to process
- E-commerce teams must shift bot strategy from blocking to identifying and monetizing, and agent-readiness in payment and identity stacks becomes the next competitive axis
Akamai Unveils a Unified Framework for Trusted AI Agents
New Akamai framework links identity, risk scoring and edge enforcement so merchants can authenticate AI agents, manage fraud risk and monetize traffic.
www.stocktitan.netThe era in which AI agents search, compare, and pay on behalf of consumers is becoming real. When it does, every request hitting your site raises the same question: who sent it, for what purpose, and with what authority? To answer that question, Akamai on June 15, 2026 announced a unified agentic security framework for commerce.
The framework is built on the company's Bot & Agent Control solutions. Its core idea is to fuse elements that were once handled separately, namely identity, observability, trust, and edge security, into a single layer that decides in real time. Patrick Sullivan, VP and CTO of Security Strategy at Akamai, described the chain this way: "Identity informs visibility, visibility drives trust, and trust powers decisions that let companies safely grow and monetize AI interactions."
Why AI Agent Identity Verification Matters Now
Traditional bot defense was a binary choice: tell humans from machines, then block the machines. The rise of AI agents breaks that assumption. A legitimate shopping agent acting on a consumer's instruction and a malicious scraper harvesting content without permission are both "machines." Block them all, and you turn away customers who arrived ready to buy.
The scale of the problem is hard to ignore. Akamai's research found that AI bot traffic surged 300% over the past year, with the commerce industry alone seeing more than 25 billion AI bot requests over a two-month period. Picking out only the welcome agents from that flood is the new task facing e-commerce operators.
The key lies in "Know Your Agent" (KYA), which Akamai is advancing with partners. KYA gives agents a standardized way to declare their identity, origin, and intent, linking them both to the platform they run on and the individual they represent. With KYA, a merchant can verify not just that an agent is legitimate but that it is acting on behalf of a specific, authorized person. As Rubail Birwadker, SVP Head of Growth Products at Visa, put it: "Without trusted identity and explicit permissioning, AI agents cannot participate in commerce at scale."
The Six Pillars Behind the Framework
The framework is delivered not by Akamai alone but through partners across identity, payments, and publishing. Six pillars each play a distinct role and reinforce one another.
| Pillar | Role | Key Partners |
|---|---|---|
| Verified identity and human attribution | Authenticate agents by linking them to an authorized human | Visa, Skyfire, Experian |
| User-centric authentication | Apply existing auth policies during human-to-agent handoffs | Auth0, Ping Identity |
| Adaptive trust analysis | Dynamically assess trust across browsers, bots, and agents | Akamai (in-house) |
| Edge-based enforcement | Judge each request's risk and intent instantly at the edge | Akamai (network) |
| Content monetization and value exchange | Capture value when agents consume content | TollBit, Skyfire |
| Operational visibility and traffic analysis | Distinguish humans, beneficial agents, and malicious bots | TrafficPeak |
The first pillar, verified identity and human attribution, carries the most weight. Here Akamai integrates Visa's Trusted Agent Protocol to set standards for how agents should behave in payment environments, covering authorization, permissions, and transaction-level trust. It also works with Skyfire and Experian to strengthen agent identity through KYA. Kathleen Peters, CIO at Experian, noted that verifying identities and assessing risk is what "will determine how far and how fast adoption grows."
The second pillar, user-centric authentication, works with Auth0 and Ping Identity to preserve security at the moment control passes from a human to an agent. What matters in practice is that existing policies such as behavioral analysis and multi-factor authentication can be applied to agents too. The remaining pillars, adaptive trust analysis and edge enforcement, treat trust as a spectrum rather than a yes-or-no decision and render that judgment instantly at the network edge.
Turning Bots From a Cost Into a Revenue Stream
The fifth pillar, content monetization, deserves attention. Until now, AI bots were nothing but a cost to publishers, adding server load and little else. Through TollBit and Skyfire, Akamai enables pay-per-request models and tokenized transactions so content owners are compensated each time an agent uses their content.
Toshit Panigrahi, CEO of TollBit, frames it plainly: "By identifying agentic traffic at the edge, businesses can enforce access rules and turn AI traffic into a revenue stream rather than a cost." Because you know the agent's identity, you can choose to let it pass for free, charge it, or block it. Identification is not only a defense but the precondition for a new form of monetization.
Where Akamai Sits Against Visa, Cloudflare, and Others
The push to verify agent identity is not Akamai's alone. In 2025, Visa introduced its Trusted Agent Protocol in collaboration with Cloudflare, Stripe, Adyen, Microsoft, and others. Cloudflare likewise offers a mechanism for AI agents to transact securely built with Visa and Mastercard.
Within this map, Akamai's strength is its globally distributed edge network. A division of labor is emerging: Visa defines protocols at the payment level, while Cloudflare and Akamai enforce those protocols on live traffic. By absorbing Visa's protocol while bundling KYA and TollBit-based monetization, Akamai is staking a claim to the trust layer of web access itself, outside the payment rail. Ahead of this framework, Akamai and Visa had already announced a partnership to secure agentic commerce.
What E-commerce Teams Should Consider Next
The implication for e-commerce teams is clear. It is time to shift bot strategy from blocking toward identifying and sorting. Rather than treating all automated traffic as hostile, you need a design that recognizes authorized customers' agents and lets them through to transact safely.
From there, the question to ask is whether your payment and identity stacks support agent identity verification. Reviewing early how you connect to standards like Visa's Trusted Agent Protocol and KYA, and where your payment partners and CDN or security vendors stand, helps you avoid falling behind at rollout. Agent identity is best tracked alongside the broader Know Your Agent developments to see the full picture.
Conclusion
Akamai's Agentic Security Framework marks a turning point in which AI agents are treated not as "human or machine" but as "whose representative, with what authority." By bundling identity, trust, edge enforcement, and monetization into one decisioning layer, merchants gain a path to authenticate agents, curb fraud, and convert traffic into revenue. The more agentic commerce expands, the more this trust layer will shape an operator's competitiveness.
