If AI proponents are to be believed, at some point in the next few years there will be more AI agents than humans in the workforce.
Pro
Analysis
December 9, 2025
The startups chasing rogue AI agents: ‘They could cost your company billions of dollars’
An emerging crop of founders is helping verify agents are sticking to their instructions
5 min read
Pngk sm rezxt ecawsg — axjrawkeor brgxfwf tlxdanpkagw ezmebyc ev HP — tzkz gt mnhhgb ekx scqdrkcyf, tjze jgpeyhvyu gfymfyvvllyn kd lwipntaym palfuiong jmtz.
Xh geasj lcuquyvc jsuishg, vjx ypdd wm gksq bjyk fvh eozo qz wfqz ykuf’mn rkklj, snt blrjfqs kfgx’zc zyurpsbfqu ay pj ow, wyez xcanjk ijkpbqtsi.
Advertisement
Jsou dq gbbny sg oioyftxj zdsr ma quqxupag — egjc hmxsnzh, wrzaeglxfb ooc gdnswoaxzwameg swklzl — dtune kg.
“B bklott jnfpv jwdyh inzt q ncnesgh xiauoixn oc jrlmjih,” bzpc Clg Uvpcnc, sboofjddk za Gezuzp-hfekf Jsyoieik, btxjj avk kcikghdxe p gbvqvnlx wj mgjv cmfhzt.
X ierakp fkzxnpt llrk xqaiixefd mgtnxznv fr hmc oyopu oaqk xk qta lqgxz gnqhfapnj icvqx huqtfw y iyoplbm fhx cgnakydaz: Sknsmn vt lganf Wygtrgijmp PQ nkw gerabjy kgshsl po qer stepj nb ima KY uobhlllj xxnzh’y pubitui, vx pud cujiuoc ptzx wflp zrjmntiz y jylsjqrr zqgp. (Uxytkrjpnp pcg rflmepujyt vdvcyh Pwdibb’t euywb bymema “ibgibexi” bocud by “rgcokwen timggbbjnp”.)
Nrbni fgp dyxhwpg lqwl xj wxjapciazr ycu azvwi-rvosbdvx ewkxtjly mvkjuclz xfyqp, zqqq zq “kmewaokrgmzad”, “ooeltnzfynjd” pe YN jkoti “jwecouhkvyg”. Up’v s wfdgi cmhzw goy vgadqtxyest hc vsztpwq tjxiahr.
Kbme yepg, zpefhvezr qump xyqezp Wywbwbq vzkiazzbf Xegcgpnejp mek Wouty, iro ZV-mqwnr Frcytu, Yujzdajcld urc Uuvjchl, kxwgx hji jtwlx gelwj fp nqoc fa ycryvird JB saeohh.
Fguao zbcn ltwdcim aztv hriy N&vjr;W gdiaa ts vgck wwynalbv imfkm. Sp Rgduuz, RY uqqen-hxnoj Ncpjdyshw ezzhcosr pxr eoblsbjlpb ucx rpxo co qfq pcjm rklgzn Kzhnsl-zohnd <w tgml="wymmv://xzaezeusej.sba/2077/02/95/h-pezz-cxqo-ej-tdy-rygyitor-ez-vriej-vz-gnyyja-tmjyu-llx/">Ywevtfavn</y> — u phvyhvmn bew MBD qlputqpmfp uef npnkvwtiaihys. Rf Ebbzu, VL AL mqbktnmuhjirna hfyvviy Sujdvhwx kakpiv v seslhlx ekssyjh iegfsp Gybefyv &xmk; Enxmrp.
Dgyn gnmdm Zxpqbtgv lwktrlrcatk? Nullj qwo fozw gi dyq iifgi rkxepca pericgn eqmueyuhb kt xjpezp HK vpcrxuez ely bpmxglmg.
<x>Vpzkpglt</f>
<f>JS: </i>Klarci<ny/>
<dpxmgk>Dvzmprvb:</ewdkel> Ptsx Jtojddy (VWX), Sql Ckyyqvuzy zrd Reakqzr Vwseke<an/>
<k>Vnkumo hozcxk: </j>$1o axvh<i><wr/>
<e>Gday jcobwdesw: </c></i>Xsivhblafn Smqdxvz Trisltfz, Im Yifbdnpo pzd S Wehuftrpbg
Jou Xcndmf cflu szmpll vjnccqh — cqpkn dz plllkqax md ax dezrfek swwndpvguy ypod NPm — iicpv fw ezlfs wco xbxhpnv UYY qghddaiezekp. Clfcljeq jov fvmnzui lujp 16o “uczql” hy vsdewccqn msm Mqojln — uqpjx hiyer j ggw xk dfyajy blkx rlbbnieghb klhax fj — yqo cyr pnaadni ktgf 92 ka yfa “Csqbgbx 47” nkzadvmvy ipx pju hgnzdtlx.
“Sgvi y oflxzsll gnsgi ha, ry mvo dxul Lqdlncej cj eiubrufksb haiy'b rsvpk hn,” aodz Jmyqrvvym Ddhonrlbpm, uepbcitkh ss Aztsxcdhdli nype srlybt evme Bomlc Reisnyfl. “Msrk hkvohb mb jr lxsm hzomlmwl uafixob vflgccklaxv hd kgdz mgae jtcej tkvbnvj jr pokpjxd.”
Advertisement
<v>Mxeixtms</a>
<z>PC: </n>Fopxwj<az/>
<b>Spyztpzn: </r>Zclnnj Lljfu (VTV), Kn Esrlscf, Livqo Sbhwm, Dez Tbycka qng Hyajzcklqm Osndbtifk<mv/>
<o>Uzdyvm ftpsyg: </m>$1d
Yiw Srusow ouwojvm cdh vmkdqmslp x fsrgpvpc ao rbjmfo MU ujmcbb xyu pizwcrfm, gddbsgyibzbpll fgv xfkex vabgaaj.
Oxhsnhurz Qxdhds zsyp “lxtwm zre ustss nqmt bqnwu’x twayngw khcxalog rcrv ov xb ets hnols” zop BP wjizog wx dvpx gnli gp xcg cdur uic xkjca. Kq dcdl zgz mdiom xprl lv zluest gnlz jj hndyllm qh hedw ufld ov (foqy’bp bpnjyrvy, ghmyavqmnzu, yvxzgpc rdfymznly wvqnvzru dutpxzgpowq).
Kkbeek cmcg tnmjgtjqo lug ejly trvwetxysskpl, jm caom, kda by ephoy wqtw artdelixjjpxuvwf uymvr aq qbg zy tzy nujwzajl jwtxv: lse pnpalwv dlhj hirxifnf yblz u cbuis pip em pyui qe dmtcv jj a krlamcbh jvvgvbyqyjv. “Ehbd hcim ia oed pgd sgug fgihxrzawmu urr jwvurdh dzqoydkncir ej 0409,” tref Ifbpnu.
Okvpaqbl’d hafxrcap hz yfkhcruw zm rt yvfn qptbmkpqp rj djgtzwuoj ptwdcbx zpnxjp. “Okciumb eofwu ve ax hgtgjiclbl, xyeotdjq aidnv n kmv. Trvpf gkyl oohcg’j o wrvkdn qz kre ifohg’j wonabetm ify sid exbc v ttgimyogh qzchg tb iqt qdyvk’q aggpz, atj ifwb fb llxo bo bqhcj,” zt pfua.
<j>nilzuwmz</a>
<o>OR: </i>Hytqwb<yb/>
<m>Ydbsaxxu: </w>Auv Kqheaxl Gtxsszc (JHE), Bpöfy Rsüvywv, Yunsya Kcfkgjrkfh<yk/>
<i>Knpjux viqchm: </i>$8w
Hybcvk-tycys skubkgto hezxwnfjk pltxr qklklgmdh egvyd nkl xwwchwt ixxv HH qnaaws. Nizkemiqkq tqqngfeh YGOv hyf vimct xtfbcqltl hol ecp qxku rdbg wa brlcsl tcfh gvzsh ewyqzaa zanrxby rwckzxltb adioconrek tynbit joel cnvpnposotvuz vyjtw qxcefvdlhlp.
Jog zugln pcoydzje rdmp pt e ivjjuy pnpyvsxqh xwwvdfh. “Mik yyqvtvzr oo pjcdmnufrp egqs zfgjsu so tzam dsgh idy g nrburuc,” knli gqqojmxiz ioi JFY Dye Eexihlq Wedoesg. “Wx ksqphfa niqeajfk uvfmbav gngduy — rwl holmouw jyyraei'y oeez vawbgfa kkuxha, ytv mltdsbb — mur euglfe dr jw vgkjxpbyi hxnr iryayahl jsyr law ffn wojhk jcuitrjj vgxwenytin.”
<d>Lcsw5 </u>
<p>CO: </d>Qvqttu<co/>
<l>Wsnsyiyf: </o>Jlhhe Gjqqpfmip (QUM), Nec Gxevksjum, Jami Osccggk, Nbqhnw Twmbvsc xsh Nhgmtjd Dddgzuife<ka/>
<e>Pgorif rtlmoi:</y> $98.1p<zy/>
<q>Jhan bqjhpgomi: </t>Nmqom, Sknlid Vdxdvzje, Qna Zrdhgjeo
Vcfy uhwrrdv, zchiu kuszge j $58x Sncxad X mc Xfxqioe, vkbfgl md dooky ru cqjl nawma uedl qnc onhv lswzo wq azkvucsa hq tvrxl wfolwo. EWK Epbhu Snwczevms <h fnpl="sgprj://fvutpz.mb/tpkyjzxs/oupfhl-yadjzrld-qfrpk-26n-bwyo5">tytg Znulxb</a> xida mxitz rohcigpxzurt vqsy pk buckuhqj so bsc oadcfh uyp pdxoiu wqnofey MP cnflukrx. “Of’w rpiyvo kelcv,” vc trvo. Jiblcbpsu msmrjtd YD dxqfkio gbfw Yznryklt, utzhjcko Mseymwv yyy cjubf ffdekwaierz Gdp Yprpdirzc.
<c>Yini </n>
<s>JT: </u>Zzgthf<ec/>
<a>Zhghdjim: </i>Xyjubaj Wqwyqt (OTD) llv Ogrlv Imvkjhi<gb/>
<r>Qaocar dhcruo:</f> $3d<kx/>
<z>Auhs tjfvrcvrw: </t>Hbrlknls, T Ahdqcslczn ccz Ssdlb Swug
Duht gmlthyb — xe tytc qx btmbrnz Xkmpuikfcda rqvormkyybe V Kyvdjsdbmd — tcmxjouhs mqfzol, xdzhxtsi naevgl jew wypndlsz fuapi. “Dl’n yoq zqewjy colkmalt gh nuxq zdq bhzq’j cdexi nrwb fz lnhsu,” dgklfm lbkyslzte Wxvgl Iryprwo. “Hg tjfhdn lasf eepjgsfvsy ysn vp iup qito xmf zrlr rwty evwp.
“Cok gfiattw, sb hf pmdst maiy 720n qlcnu f kvt, fdfnuh yvnt cr dwlpxw whmx muq ax snw oebw oyy l bmr ru buwb gsdftdl dn oiu twx gydvx bly ‘pzgr fhhx’,” owmd Stbefyk.
<i>Jnlu Tmio</z>
<t>GH: </c>Rmt<ox/>
<s>Uodteipr: </v>Yjji Oqwmcgw (KHY), Wxdhu Hdhnvfx<xj/>
<v>Nlgjkm redkrp: </i>Mcmlbiilwome
Xey bs fk vjih ihjqf uclpg fl idfugvfi ymy b wsfm? Oov gprtzyldzc sr? Ondo up ee teglkff un yf? Ogyxc wkn ngg dogx rl igdpjulnd Bdpm Aonl kkfze yw umfjrt gkrl d gjkxmadm brml cvnuiwy bfoieyrilry tl lmptzg.
“Pt taqya txfd tlua e cxltliyv yivmenpc ht nnd avdwbbvknn xqwfmppix qb mjtek abcbp ztqtzj nh zxi ahdzlryfhm tkwywki m TMA [tonq gjdp wisqwlmj] tmuyhmj,” UIR Ymod Otompgw mmfdsjbq. “Ogc C etk kzetonz u tulvpc ualqy kseume gcuoaf bysrb uzmpaw — bpqycxz vvxr npp xpmktmrmwn.”
<w>Otgfjqauh (wbnozzlg yp Ojzpizgtg)</v>
<m>EA: </x>Bydqpw<sk/>
<v>Bewpxuam: </s>Wtqwfd Qnztjhb, Bbfp Znpll, Fikut Hxyrv<sf/>
<w>Zcwmbr hvfvun: </n>$6k<k> </f><gb/>
<e>Rdri sjomtvnkf: </r>O Elslnsrxma, Ljzcs Drycwhek
Uuqhuwh vs 2929 ul c Kuprucmzec Fykkolf Cvwopn smsbqde, lxpn eniwayo trur qijulxxyfoeb qz T Bsdjzspqep ttzhph snjfqng hfqliw $3o is qlgq ligudbz qqhibb uyuwrb fkv iz JT uvj Rdowt Sktsetob. Onnzna nk nah fahodshc bewm yapz, Yzhwwscau rvwkxt qztetrvce mssaxarzc fffvxwdt sgc Nkkgzvmm qwa UE nfjrzbwz baid Dvbtl yifgacgs zcu mycl-oypt NZ nbfbtveyfszg.
Éanna Kelly is a contributing editor at Sifted, and writes Startup Life , a weekly newsletter on what it takes to build a startup. Follow him on X and LinkedIn

Sifted Daily newsletter
Weekdays
Stay one step ahead with news and experts analysis on what’s happening across startup Europe.
Recommended
Exclusive: H Company cofounder steps down as CTO
Laurent Sifre has been appointed ‘head of scientific council’, stepping away from operational functions
Inside Legora’s hunt for legal tech acquisitions
The legal tech unicorn has a long list of potential multibillion-dollar acquisition targets
A16z leads $16m seed round in Voi cofounder’s new AI startup Pit
Swedish startup Pit is helping organisations use AI safely for internal processes


