Agentic procurement is a workflow in which software agents help people find products and may, in some designs, prepare or carry out purchasing actions. It goes beyond AI-assisted search: an agent that can interact with ordering systems may initiate a real transaction rather than simply recommend an item.
This matters for cybersecurity because purchasing systems involve money, business data, and delegated authority. If an agent is manipulated or granted excessive permissions, it could select or order items without appropriate checks. Defenses include limiting access to the minimum required, setting transaction rules and approval thresholds, validating product and price data, and keeping audit logs. Human review is especially important when an agent’s action commits the organization to a purchase.


