For two decades, security and data resilience have been neighbors who share a fence but rarely a budget. Security kept bad actors out, while resilience brought the business back when they got in. Agentic artificial intelligence is tearing down that fence, yet most organizations haven’t noticed.

Last year, I wrote that Veeam Software Group GmbH’s acquisition of Securiti AI positioned it as the industry’s first AI resiliency company. At VeeamON 2026 in May, the company foreshadowed what that would look like.

At its recent VeeamON Global Launch virtual event, Veeam announced a product: Veeam Intelligent ResOps, or iResOps, with Microsoft 365 as the first generally available workload. Whether you call it AI resiliency or resilience operations, the idea is the same. When software agents act on data at machine speed, you can’t secure what you can’t recover, and you can’t recover what you don’t understand.

Assume failure, assume breach, assume drift

Chief Executive Anand Eswaran (pictured) opened with an example that should make every chief information security officer squirm a little. A company in Spain recently told its regulator that an AI agent, acting largely on its own, breached it by finding a flaw in a live application and modifying personal data and billing records. Eswaran framed the 72-hour disclosure requirement as an engineering problem. “Somebody has to answer three questions: Which records did it change? What did it change them to? And what were they before?”