Deployment of agentic systems at scale will require solving multiple classes of unsolved security problems including identity (whether agents act on behalf of users or have independent identities with limited access rights), behavior monitoring (historical activity volume is no longer a reliable signal of compromise), and prompt injection prevention to prevent agents from being manipulated into risky actions.