Commvault and Zscaler announced a strategic partnership on Nov. 10 aimed at helping enterprises monitor AI activity, control what autonomous agents can access and restore affected systems when something goes wrong, according to a report from Channel Insider. The collaboration brings together Zscaler's AI security controls with Commvault's data protection and recovery technology as businesses move AI agents beyond testing and grant them access to corporate applications, data and infrastructure. The partnership addresses a growing challenge: when an AI agent changes the wrong business records, IT teams need to understand what changed and what they can restore, not just stop the agent.
The planned collaboration covers three areas, the report states. Shadow AI discovery will identify AI applications, models and tools operating across enterprise environments, including unsanctioned usage. Runtime governance will establish security policies that flag unauthorized AI activity and help prevent sensitive information from being exposed. Agent detection and recovery will protect autonomous agent operations and support recovery when an agent performs a harmful or unintended action. Separately, Commvault's AgentRecover technology is designed to audit agent activity, identify connected resources and restore agents alongside affected data and systems, with support planned for Amazon Bedrock AgentCore and Microsoft Foundry. Commvault is targeting early access for Microsoft Foundry later this month and Amazon Bedrock AgentCore in December, though these timelines apply to AgentRecover specifically, not the Zscaler partnership.
The announcement outlines planned collaboration areas but doesn't specify a joint-product launch date. AgentRecover is designed to map the data, applications, identities and infrastructure that agents interact with, helping IT teams understand what an agent changed and prioritize the resources that need restoration. For managed service providers and channel partners, the collaboration could support services covering AI discovery, usage policies and recovery planning, with partners able to begin by identifying which agents customers use, what those agents can change and whether existing recovery plans cover the connected systems.
The partnership matters because AI agents introduce a problem that traditional incident response tools weren't built for: they can perform legitimate actions that produce unintended consequences, the report explains. An agent with permission to update business records, modify configurations or interact with multiple applications could create problems before security teams understand what happened, making recovery an increasingly important part of AI governance. This matters particularly for businesses handling sensitive customer records, financial information and regulated data. Still, visibility and recovery can't replace careful permission management, the report notes. Restoring damaged information after an AI agent makes a mistake is valuable, but preventing unnecessary access in the first place remains essential. Commvault directs customers to its SHIFT Virtual event on Nov. 18 to learn more about the collaboration. The partnership arrives at a moment when recovery planning still starts with permissions — for employees and developers, the immediate impact isn't a new AI application or feature but security infrastructure surrounding the tools they already use. Enterprise technology buyers will need to weigh whether integrated recovery capabilities justify the complexity of coordinating two vendor platforms during incidents, particularly when response speed often determines the scale of business disruption.