The endpoint security market is entering its third generation. The first was antivirus: static signatures, easily evaded, built for a world of known malware. The second was behavioral detection and response such as SentinelOne, CrowdStrike, and the EDR category they created, which watched process behavior instead of file hashes and became the standard enterprise defense for over a decade. In both of those generations, the assumption was that the endpoint followed a familiar pattern: A human clicks, a program runs, and security tooling watches for the process to misbehave.
终端安全市场正迈入第三代。第一代是杀毒软件：依赖静态特征码，容易被规避，为已知恶意软件主导的世界而构建。第二代是以 SentinelOne、CrowdStrike 及其开创的 EDR 类别为代表的行为检测与响应技术，它不再盯着文件哈希，而是监测进程行为，并在十余年间成为企业的标准防线。在这两代产品中，始终有一个前提：终端遵循熟悉的模式，即人点击、程序运行，安全工具则监控进程是否出现异常行为。
That assumption no longer holds. AI agents now run directly on the endpoint with the same privileges as the user they serve, reading files, executing code, calling APIs, and moving data between apps. Microsoft embedding Copilot into Windows made this the default configuration for the modern enterprise. The interactions on the endpoint have fundamentally changed and every control built on the old assumption (EDR, DLP, Zero Trust) breaks the moment it can no longer tell whether an action came from the person at the keyboard or the agent acting in their name.
这个前提已不再成立。AI 智能体如今直接运行在终端上，拥有与其服务用户相同的权限，可以读取文件、执行代码、调用 API，并在应用之间传输数据。微软将 Copilot 嵌入 Windows，使之成为现代企业的默认配置。终端上的交互已发生根本性变化，而所有建立在旧有前提之上的控制措施（EDR、DLP、零信任）一旦无法判断某项操作究竟来自键盘前的人，还是代表其行事的智能体，便会立即失效。
This is not a gap incumbents can patch. They built durable platforms for the behavioral-detection era, and reworking that architecture to attribute every action and intent to both humans and synthetic agents would mean rebuilding from scratch. Most will add basic AI discovery as a feature, but this new problem requires a complete rethink of what security means in the agentic age.
这不是现有厂商能够靠修补解决的缺口。他们为行为检测时代构建了经久耐用的平台，而若要重构其架构，使每一项操作和意图都能归因于人类与合成智能体，就意味着从零开始重建。多数厂商会将基础的 AI 发现能力作为一项功能补上，但这个新问题要求我们彻底重新思考：在智能体时代，安全究竟意味着什么。
