85% of developers now run autonomous coding agents like GitHub Copilot, Claude Code, and Cursor directly on their laptops with broad access to production systems, source code, and CI/CD pipelines.

This represents a fundamental security blind spot that existing enterprise security tools weren’t designed to handle. Developers routinely get exceptions to standard endpoint policies because their normal activity already looks malicious to traditional security systems. Now AI agents perform those same high-risk tasks autonomously, creating what Manifold calls “the next major attack surface” as agent adoption spreads beyond engineering to every knowledge worker role.