The May 2026 wave of enterprise AI-security moves (Zscaler agreeing to acquire Symmetry Systems on 21 May, Snowflake agreeing to acquire Natoma on 27 May, and Microsoft bringing Agent 365 to general availability on 1 May at $15 per user per month) signals that the contested layer in enterprise AI security has moved from the network to the agent-to-data access graph, so buyers should evaluate platforms on whether they can map which AI agent accesses which data, by what path, rather than on network controls.

Anchored on three primary moves: Zscaler intent to acquire Symmetry Systems (21 May 2026, access graph mapping which identities access which data; Jay Chaudhry Chairman/CEO quote; zscaler.com/press/ai-announcement + ir.zscaler.com + GlobeNewswire); Snowflake intent to acquire Natoma (27 May 2026, enterprise MCP gateway enforcing identity/policy/audit at the tool-call level; Sridhar Ramaswamy CEO quote; BusinessWire 20260527677399); Microsoft Agent 365 GA (1 May 2026, $15/user/month agent control plane with unified registry + shadow-agent detection; microsoft.com/en-us/security/blog/2026/05/01/...). VERIFIED 2026-06-08 via Zscaler press page, Snowflake/BusinessWire release, Microsoft Security Blog. FRAMING NOTE: Agent 365 is a governance/control-plane product that includes security capabilities, framed as such not as a pure security product; no named Microsoft exec quote on the GA was located, so the piece does not attribute one. Deal terms for both acquisitions undisclosed; both are intent-to-acquire (not closed). 90-day cadence, market dynamics. Triggers: (1) the announced deals fail to close or fail to integrate the access-graph capability; (2) a competing layer (e.g. runtime network controls) proves to be what incidents/audits turn on; (3) the access graph becomes a commodity feature, weakening it as a deciding factor. Siblings: AM-204 (NHI governance vacuum), AM-203 (Anthropic valuation / vendor lock-in), AM-176 (Okta vs specialist NHI vendors), AM-191 (Big Four model concentration).