HUMAN Security Q4 2025 Product Updates

This quarter, HUMAN shipped faster visibility and tighter control across the stack—from managing AI agents in HUMAN Sightline and new Okta actions, to fresh AgenticTrust dashboards and multi-app views, to Client-side Defense audit logs and our Website Risk Analyzer. In Advertising Protection, MediaGuard v4 brings unified data, MFA enhancements, and expanded IVT taxonomy—while Page Intelligence now exposes page-level IVT in real time to protect performance. Dive in below for highlights and links to demos, docs, and resources.

If you’d like to learn more about any of these features, please contact your account representative or fill out this form to connect with us.

AI Agents are now included in “Known Bots & Crawlers” under “Traffic Policy Settings” directly within HUMAN Sightline and Bot Defender. With this update, customers can measure and manage agentic AI traffic by applying consistent policies across HUMAN Sightline and Bot Defender to allow or block agentic traffic at the agent level. For more granular visibility and action-based control of AI agents, check out AgenticTrust.

Customers can now create an Okta integration directly from the integration page. This integration can be added in the AD action settings screen and be attached to a policy rule. There are currently three  action types available: Disable Account, Disconnect Account (which closes all current sessions), and Reset Password.

Response Custom Parameters let you add extra details from your server’s reply to the data sent to HUMAN. While original “Request” parameters focus on the user (like their ID or session), these new “Response” parameters focus on what happened after the request, such as the status code, error messages, or response metadata. You can set up to 10 of these parameters to give HUMAN better visibility into how your site responded to a specific visitor. Read the documentation to learn more. 

There were several crucial feature updates and stability fixes made to the Enforcer and Mobile SDK. This includes adding several Enforcer versions (including Akamai Edgeworker version 4.4.0, ASP.NETversion 3.3.0, AWS Lambda@Edge version 4.7.0, Cloudflare version 6.12.0, GO versions 5.4.1 and 5.5.0, and Salesforce Commerce Cloud version 22.1.0) and updating the v4 SDK to maintain the integration (see SDK changelogs for Android, iOS, Expo, and React Native Wrapper)

The last quarter saw a number of significant portal enhancements, including application type selection, data enrichment expansion, and dashboard messaging redesign. The portal is regularly updated and streamlined for better user experience and transparency.

Dive deeper into your agentic traffic by leveraging two new dashboards. Visualize the volume of agentic requests and their common patterns with the “AI Traffic Over Time” dashboard, or click into agentic intent by activity groups, such as “account changes” or “checkout” with the “AI Agent Activity Distribution” dashboard.

AgenticTrust now includes the ability to view data from multiple applications. Simply select the applications you’d like to view to drive visibility into the traffic that matters the most to you. You’ll also be alerted when applications need an upgraded enforcer, so your data always stays up-to-date.

Updated to now include AI Agent data, such as Agent Name and Route. This allows customers to filter for agent-specific data in their investigations.

AgenticTrust now verifies traffic from Amazon’s Bedrock AgentCore browser, ensuring that AI-powered agents built on AWS infrastructure are cryptographically signed and secure. Read all about it.

As new AI agents emerge, HUMAN adds them to the list of detected AI agents in AgenticTrust. Last quarter, we added several new agents to the product, including Atlas Browser from OpenAI, Claude for Chrome from Anthropic, AgentCore from AWS, and Rye from Rye.com

Platform-level admin activity is now logged in the Code Defender Audit Log to provide better visibility records. New items include:

Customers can now get visibility into blocked client-side incidents using the CD API. This can also be used to monitor new blocking policies to ensure a mis-configured rule hasn’t accidentally blocked much more than intended.

Website Risk Analyzer is a Chrome extension that scans your website to deliver an inventory of script vendors and a summary of incidents detected. Download the extension from the Chrome Web Store and check out the documentation to get started.

As we closed out 2025, one thing was clear: the threat landscape evolved and so did our defenses. Across 2025, HUMAN’s MediaGuard flagged over ten trillion requests as IVT – the most it has ever flagged in HUMAN’s 10-year history. 

AI-driven automation, MFA, and early agentic traffic moved from edge cases to everyday reality. Here’s what we’re doing to keep your team on top of it all: 

Blog: The Interconnection between Site Performance and Campaign Optimization