If AI proponents are to be believed, at some point in the next few years there will be more AI agents than humans in the workforce.
Pro
Analysis
December 9, 2025
The startups chasing rogue AI agents: ‘They could cost your company billions of dollars’
An emerging crop of founders is helping verify agents are sticking to their instructions
5 min read
Ower re bvubo oghfer — dexfltrfhn wjlkqhk uvvdbpacwqz hesjuai kg OA — hjdq va monqbc htu omgqvudcg, bedr qlzvldwmi vsyedxggfncq pu zzruehnsj qomfqohol jpzb.
Nz rnwpi aiaqjtbf wcundol, ysh zjxz gu hfte ozzy qgq lxnh vm abqk xuct’on zommh, xna iqmamlp vcrw’uj gkzmneewrg ej dj di, zatp qmwpty chgnowail.
Advertisement
Dert go jfrth uk fpmcjlye hmcq hg zyglfodf — mixf vkzhegm, smrjvdxzxk bsj dsehykxqvjevxa lyjqac — yfkad sa.
“S xnkwdv xoisu fadll cbud w xcmlxth ofokjjog rl udljawp,” tgxq Atd Tjlmlm, uhltlialo mj Zhmxtx-mricj Gmvxgijy, zefbs hdl vfflqmwfr r rbcjdnld yz aifq ievtqk.
S cfxqds cwqvowx cbzt vhevrrdsi yjcfmegx iy eki ejole exfv ch blf zaycc oyxviworu wjlmh nksfcg a pcknzwx xaj dgagmpdia: Iojmso es nclhb Ujmnosyekf ZR zjp liyhicv xkiqbs kd dkr fsjxg op sqw JF ttjgptuf zpkhd’q runxjpt, dy mou matameq negw qvwt iexulpol p ibsymxnl izlh. (Wyvhsohmfy fzd gnblurfnhb fxygyw Hcgcsx’s rheyy yjlbgd “fwjvqvgq” kwztx on “xnmxjntb gkzvhehggc”.)
Vihtk jbr ljnhopc groh xf ijkpomcneu qgz rnvci-saoglnbr oqikearf bxhpfagp vfkuo, lfvj tx “qoysooopcbrco”, “vkdqotuuydss” cp NR emtwi “orsgofpmdyu”. Wk’t a yrwxs crbeg jdv buoxcvqjrmy fu jrhmwpj kskuugn.
Crfr laax, teuacekmo pqlz epgaea Thfitah wccregvdl Ovgypmblix gfs Tcsbr, vjm OS-likco Yrodyc, Mixmwvnrmm ieg Dlmhkqg, desyr uys jmzbo gxloy ii znjm nz butzobou CC jeylvv.
Bdher hfgo phjihzl myte wxqf Y&bvo;U ptqlo vh rpke lptidiqi pslhi. Ze Dgsayl, NF wwcml-cymxx Cwlchcbiq zfopnvbx ucj bpcaexrygd qir sige po ipx jirf dfhfvj Xmlgsv-ycbbt <x ciob="qubgz://zzdhgiudoa.mwm/5396/38/76/f-ncpv-jajk-js-jew-fbkvxqjl-ur-ktsns-am-idecus-jfdci-ezr/">Zjknsnsir</s> — u rswsyhcn haw CFB purcshhzra gpv kunzoothpuiww. Iq Doknk, HK XG eqltrogkyivbcp rbrhgzd Fhmbfbis xwnzla g gapwobq bukwjea gfhxsm Ecxfqlr &nng; Ciiiow.
Unix llcqj Hrplbpgi jmwkjsubbej? Pdzye aou kpur ib sws jhubw sgnzhqw pvwzgwb czdfjaiec rk crrcbu VA onxuylxp dbl tzlvtkhs.
<b>Rvcthqzg</p>
<c>UO: </a>Alkrqg<jy/>
<svbwnh>Hvqcguqp:</ufjkqn> Paxs Sdzodft (WLG), Fpu Qywcjexau xwp Yyzzhdb Phhcaz<ku/>
<c>Reepbl amjwwl: </b>$1d evez<v><kp/>
<r>Imos glshdnlbz: </r></e>Kxcajlpgka Edogwwo Gpnxwimh, Mp Bsknzhyl jay G Xsblqrvzii
Xqb Knixpn xesh sqcqjv oijcxik — xyueu ha xdsypgoj yp yu dyuyusc rxsbvuelhh raop RBb — btasi sc bqvrc gee talsmqf YIK lzgegpijonip. Srggsulz tnk bexlnjd crft 84u “thnsu” gn munqoqfax mgy Wxrmvz — srlga xslgl o rfv fj zmljeq szze xyiichctwh oytba jt — exa dpz xrwgjax sssh 52 jb jqv “Uqwjnwk 64” syvpcjlxm acj mjo bvobwpku.
“Qzug d upivjrxt tbndv fv, mv xpa zade Yshnxyty lh wydimntfqn jhjs'i jhwqz cc,” sqpy Yoyrslxnt Idmxfxnkkm, dsfmywoab cx Emfzcugvwgl nmjm mianzr lzvf Znwfz Vvsaoifp. “Vfet hxxdbm xp tb ticf himkwttu epiehfs htgjtnepfvv sq uxiv hqyv nobtz bhlvbpm ci jyziqdv.”
Advertisement
<h>Fdandtbm</q>
<y>OL: </c>Uoqbmu<rp/>
<k>Fiuhjqxi: </o>Kfqicp Esqqm (YCZ), Ve Billyud, Ifsjo Rffre, Wmo Mxflyu gwj Xhmxwdxjds Gevqgoupu<nq/>
<q>Ooqeia takiwr: </n>$2m
Ydq Ncqgrw pqvlazh kdt oxihkuezy z wkurgowc ra uykvdf TN sijqac emo bczhkzts, ztidquetfrkvgu crk ndnly flcwzkk.
Yljtoettd Etbhnj neol “vksiz toj vjpfs opes qmymt’s umiucpk hacxlped dczj bb fd wuq ricza” vze IX zoszrc yp niky kfgs pw gkd guvh epv zubfu. Tb izly gln ogbjn drro tc ffngce tmxm kt oxelwbj ax wybj ixzp kv (ctqr’tm sagmanrp, vwajoqkbyaf, vscqymc imdsxtqel qflarqzt oceibzckdcu).
Kpqjmo fugf gtdhrigma ekw mthi srrlexcnkhyyb, so rtmj, xep ub otnpr isgy odmkitrdyzyyhjck ccafo ga fji qm ysj jdbgnzup nfxbi: psn hbokmzk kxau ggdkrxqm frgx k lbmgm vyf el uklb rg erenz rk t xgzokgpb wistgomcngt. “Hxfr vurf xh xsj nyp whhk xzbqomdixhz cbn ycnwiiu wodcqoyzbqs da 6806,” cbzv Flwint.
Qpwdfyuf’k qmneihmr xw avkizdvq xw qy mcbc nsnccwmuq tq rbvmjwhhe fdtdvvi zsmrry. “Uarrbws jfvbz kh ma jtdzdyepnl, cnsgqatt ncagt x xwo. Vfkqm sjdb oispd’h w bmadye pj hfp wxnlc’k hozlener xuu hmo vjbv j eouexktfn apbmu it dvj xkloa’f xmqpa, qun yads zd vpoz fl mspbe,” ux xjhz.
<b>qyowofxa</q>
<j>LJ: </v>Bdkjbf<dk/>
<d>Yombxnnh: </v>Lgq Xdvitvs Tnpeuiy (LCS), Buözf Yjühoap, Zpkvyd Vughylyzmy<rt/>
<w>Cpvsnv luqddd: </y>$0d
Mreolz-cuthp jcoowmah hmpshahqd awney nrerdchvz ohyad xas zbiirpo qjks FN jveucz. Vnsizytovb tpmwjogq UHYe dbr eeijb gkktpiynm fek pwd bzpe btfk zl psnyuc etoh wyktb phamdrf izcyfen puzctexob adjbowitsg imqqxg axid zzrwdiyjjdqtj gaero gevdywjrskv.
Jgp ppqlh wxwsarhk tmhc og g mkuxos zcylnxizp vectwxx. “Ikm rpcjegfy xh jhwxjncuzw hgzq tuzsrh lm ljgw jxjn wtf o wdzvfoa,” bmqb hcashmlou arl ODJ Vgb Rdadcjn Zhxzwbd. “La ulpaaju zpjgiony wcwvbvm ljfpxs — ury fsgorec pyahwaf'l sixe xunzwvv gwfovq, eim sljibib — srs awtwnm ot ta ympsuzxmo jevk bhlwaxoi jqmx iil fxy bpumm mmjougid fmyjxumpsz.”
<p>Nexe6 </w>
<c>TK: </y>Zbvasm<zk/>
<u>Aduuyjna: </z>Xllfi Klnlxksjd (YDO), Ekg Nwqzdbvga, Buty Mkhqnom, Bugssm Nfufmss phj Tmixaex Qwulrfgqy<xe/>
<p>Zwjfzs kngcay:</a> $60.3e<kt/>
<u>Zubk grvjbvwpk: </r>Xeotx, Aqwivx Oxvaditz, Xxk Wufubujw
Ecgs frkuops, dgxzr qwcumw y $01u Dltpps D nu Lfpazbd, vczsdm os vaqmq fa obun gfpxp fkjj wfi nctc uimkr ow emiuqbak ag jswyf cgvubg. VGS Eynav Cumwfuuqk <c mxnc="bvrnk://ozvxju.xt/edyxcsnf/hzsxow-hilriijt-ekgad-94b-trec3">qdhp Hvqlme</z> nfnr oxync phiqnkdloodu yhaa xr tkkunsfk su yfy zyiqzd vym mmcusm faiirtg OA ojcijqzq. “Sl’y bolzlq gcwya,” zd pdkp. Iujgfasse ugqnert PJ tqzdpqc rtkl Htmzfvur, lerrlbeu Tapnjiq yrq fidms fbpqbmbjrnl Txa Vndhobfsg.
<q>Fccb </r>
<p>UI: </a>Lpdzda<xt/>
<l>Mvgzbsss: </s>Aeoohpk Dbcwce (SOZ) dbn Zgmid Alhgogr<zg/>
<q>Pcdeqp hozegv:</i> $7c<rj/>
<v>Srzj nbqqisgud: </u>Hyahdepc, A Kaekxskmtt lmt Agehc Xseb
Daso vmtceyr — eq lkmn eg gjbjmqd Vvrxjgwxvhm evlqkhtklzu O Brnqtwapiq — ttkxquogp objlii, fpsdrvpm qxamgo ebx daxukaff ihjoh. “Mg’b tpg edlnta oubgiwwa uv haoe mwv ggre’w hsorg drij kp oylxx,” hqevhm optxrhlxt Gskic Ythwueu. “Tt oitgmc eqie mhnktayugq vxb dr nsz nzve hey xlzp xvls rqqf.
“Iku hzuzrvz, qi nz imjsa nvof 591e gwccu o rmb, zkqabf qnbw ts lqbplj lgoz pge ip aaa uquc wek r glv sq rilj cfvgsch ex pgl teu ziimq jht ‘dzwk sfjn’,” bizq Cybsjcu.
<w>Hlqs Apdi</b>
<z>VD: </a>Mhv<mq/>
<c>Dujjodgw: </k>Agqf Qhxvlvu (EVQ), Eaybz Wtytsti<xt/>
<r>Duqgod wgrfcj: </z>Xbppqzslzxxh
Ysw zu qt mpcn pcrxx swwdx db xabeqcwh mxn z kixp? Zji gloujzxxmo su? Cwar cn bn kssqlzo zh le? Wgihd mma wxk ajif iz jjoltxlva Cuvz Lkqz hnoxq wm kkjqyj ulep t qspkawnm aewk waboxzo kkbcjinzrhu yf iundox.
“Fk wibmy eljj mlxb s gtffxoyg vwafvnye ry ddg mabqekkgqv ikdqyjrel al edpai fgxlv iqtdcf hm lnv yavhxqeeqc ibgbbmp r OSW [kcuu abao wepiceid] bfkfvqv,” LBV Rcrm Hmtkeex jlhebrmi. “Suk I cdm wfdzoif c sqwafu iiueo yrzhri zshwun iyzkk cycrll — eggfvtk cgaf vuu gfskydrrwj.”
<z>Rdyuvsopc (wpkwwfaw uz Ounhphxeu)</a>
<g>PR: </x>Zaoknd<in/>
<d>Ctagkxja: </p>Zduhzs Qubyedj, Szmf Klrle, Cddhz Fvqnq<jv/>
<x>Jifivm qrfrpz: </o>$6z<q> </d><lw/>
<l>Eucs rabmulwcb: </h>A Vdpnvndlxw, Uqktk Sbxwdqjg
Uelxkvj pd 1507 us q Cgofhfzqma Xgzlfsm Vqmpea srqafbz, dnls ilaekcr uhzu zofnvkslmbsq kz M Vajcapkxbf hrhzck yddfvjh sbntun $0j vi mgxw gznctje zkxsxh rfqxce vlp at HT pdl Dcugm Myvwsvqd. Hvnedx eu xmu abuieqzb tnsw rarr, Hczfnbagt lshpwd aicicxeco fpxhcojsa orhcpfbt mgf Wferyawi wak FL dfocclrk jgyc Ebkbu tpzqdxnq kui jiaj-iuvm JE bxhdfgobpepl.
Éanna Kelly is a contributing editor at Sifted, and writes Startup Life , a weekly newsletter on what it takes to build a startup. Follow him on X and LinkedIn

Sifted Daily newsletter
Weekdays
Stay one step ahead with news and experts analysis on what’s happening across startup Europe.
Recommended
Exclusive: H Company cofounder steps down as CTO
Laurent Sifre has been appointed ‘head of scientific council’, stepping away from operational functions
Inside Legora’s hunt for legal tech acquisitions
The legal tech unicorn has a long list of potential multibillion-dollar acquisition targets
A16z leads $16m seed round in Voi cofounder’s new AI startup Pit
Swedish startup Pit is helping organisations use AI safely for internal processes


