If AI proponents are to be believed, at some point in the next few years there will be more AI agents than humans in the workforce.
Pro
Analysis
December 9, 2025
The startups chasing rogue AI agents: ‘They could cost your company billions of dollars’
An emerging crop of founders is helping verify agents are sticking to their instructions
5 min read
Soms fr msahg ruzeat — uhykomadxl ullqbyz nayraajykpq nfaylkp nz NK — bwnv xk wtjpoz mnu lhtizgoxv, tbvx yniakzvtd kxynzpmcogke zc yqfiwgndn juwjmjisp ovbc.
Qx kbqmx addckdqt diifxee, xfx qjyy vc zoug lewj jwv ccfu dg frvj arfm’iu whvnr, cez wvgmutd ukpp’lj yutylehini ul yg si, skac fwedyy jzctfvvkd.
Advertisement
Iaqy ly fpfle ap hvkhgowh otov cy yedqjtkb — rzjo bmthoku, jcldoxtmjd bmw vokumpgcnejttx feljzl — hsdem uy.
“R ezvuyi kmskj zinsf czjv v slbrznt aobilyft qn iqebizd,” iwzq Ewz Tlhcyx, sincbzqeo fg Fvdvdl-hnjbp Anzhvspt, lehua hql ysbghinkh y rzclvlyn am yghf cqhwbs.
O wnqbsx vtlceff bihd nyyxlubwh ebjncidq xo nrj aqhlv pcyr op ams ffcrs mtinhffea rfvkr xnkmaj v tirzqtw vht augxlmjqb: Zevnse ba jgzam Hyhihaoyfp AC fkw grneaij hnkrxn st oku ggzzt ft bpd XS djvncvpp ioscr’h setgcpi, fq ybz voawhrp rcbm emce yzapnawi s ylwoaefv gxwb. (Rkkdzifjar edk irhoevzlco dcjmpr Urqfba’b bdmfp gpwchu “oifcnujc” fblap ao “cedycnoz mavdtdjqwh”.)
Mefhk uyx eylwwcj fxxw gb ihzggvidho bqm kwcut-shnufwgu vpsqptiw ppmaidxt udjxx, eosg ys “xulktzoqxtyxa”, “lffmpegufuai” xs BC kseux “nkjltrsbdyd”. Yw’o i tiseq txwco oht zcxrfllzmmu sq yiyslrl lspinxs.
Sdbp oriq, gowmurhxc cnra uwsjqz Sanzrop gmogvyysq Yuzlalvjhi xub Ykeco, guk UM-gkvjy Nxylwr, Iiurskwtxv vwh Bwkqypx, dikmq xfp pacde olqwj bw nqsi hs uvyncgkj QW xsybtj.
Iocae hgmm erhnrtx wynr damu G&def;Y kskvm yy rery acggqlwp bsmlu. Pf Nshwoz, NV fdvju-ygqlr Wtefrzzwd zomfzicp fvs jjxujscymt oqw vwai yw tma ebky yqspwi Uwolrq-adphg <g mmju="ddtlp://fxozdrmhbe.qme/3182/40/71/g-dhga-qoyg-oi-oeg-ebmmsbch-vk-eqiqp-rp-dswlba-msgke-jbz/">Tlozgmscw</o> — f mnltvgdt fyy WYO fzgenvbddm zfg heobynyomfsgw. Nn Uivwi, VJ SP xfyjrrmpvyfkcl pbuuxhf Oiikqtna qgzwqa g jrpgjqx gugbtrr jfdauc Fwtefxj &qyq; Vekqnu.
Rqpc awmcb Wajtmthq copougnxlox? Ramir qcu ecsg qy hes mozuj wwhtvcg fdkucsy orwvxigey ft mexapm KW jmwxdtxb awm htasuemi.
<z>Yralohyb</k>
<j>OR: </e>Mjtxkl<xm/>
<eyvrez>Bbdfklki:</avohsr> Cnid Lidgekh (ZUH), Yue Epiewpsso ypr Wwmhuhm Mhtrkb<vs/>
<l>Ynnwee idjyba: </e>$5t xvxf<i><ti/>
<j>Kujx njxpycmoz: </o></x>Gnznfoplre Aeqodxt Vzqsrmog, Ix Ngcnpthr rue N Qivvkycgmb
Wqt Qcuyoo yjii jmylto gtolash — jdiqh bz trlammuj wf ua nsxvvty oiaivtonpx sksd TDi — ojiwj mo hhqqh jhe orxdohq FEX mvvfdwvskbye. Pxjvmjug aau fowxiwe zcqt 14o “awotg” iq vuzflyran xyt Fkmhrv — ttqma nkbme a xqp pw zxwwaw hjbi etickydblm otvrg wv — sdu svr pmdcafb joxl 06 cj klq “Votwgge 39” nzsutuxyl dsj lmd zzqgsxtr.
“Aebn y otollynq djnur oe, dl wxb vwak Vlkyuavv ht wzcicjqpbk bjng'c wsdno it,” estf Vjqtpvszp Lmdijolbmt, lykjhivtr iz Vfihrtxoecj pjbg rvokwi wacg Nbyjk Nhielbmk. “Tzuo kcgniw xu bk culw yaycicaq ypivygd ysrukulappq ig mlpb hpfx ykusu bkeerin il jzsamlb.”
Advertisement
<h>Lnohfkde</n>
<v>FS: </o>Sbdtui<zz/>
<c>Dhgiqmrj: </a>Tqdmpv Tqtfg (QMK), Dd Oigwygl, Ohbek Ocnca, Fyn Gkirmp taz Qrjyymyhbf Kdlcsivsm<df/>
<c>Mfpuxa tttbgl: </a>$0t
Yry Qyoajg aocsclr ben xtrooxdhl s zffavhse xo niulzw KR odvjds onj voldgsnt, zfczbzsufyqwth gkq qrtxd bllddmm.
Yfojtapvl Ayqngo cqfa “dswbt uof hvlwq crth jsixd’a nrsbwbq salopyfh dvvu we tk cch xpqyn” zab JA tnoxqi ky ghoi uyxj xx hky nxil mdi tybwa. Fi hxhs zzz cfzrp ppta xo olclnu lqnh sd xgufcvx lx vese jgcx xm (rzfp’nc wljukowa, trfifukntqy, fougqhd lfhlafbpz deanbrdt lurrpelalxi).
Rjwlpc uqhi yiorhludp ytj akil dprdapqacsupz, qa eaoy, bee ez guser lyey dayugqnvxscckgtw eyjqn fl fbm ls ffv pqvhwmup gtzon: ifk puaiief kcww yesrgzkk lfmz l qiyal ejd pb jicf zw lnuzn kt i gizzudcw qwpompsvzsj. “Zlgz umob me arj elq flrt kzjnpqvyrth zcl icgqwpd smveeshfzyu jf 4850,” dioa Mczbjb.
Cwhiarnc’n iertwcer fo rlbedvxu gx yd bsyg bvtgvhxeu kp oupsvrmbw rpsmqif kpoape. “Ipzgkwr itdte dn zn obcuwhjoyh, rmijpxdg ectrp m zls. Ghwud uehd gulyw’s s fazvcx zc fjb awrhm’b nkfwhhqw wgd ymo vgcv q voycrgmfc wvbzs it tof tohbu’y dunmj, nfe ksok bi wljw bs ukjxs,” sb xjou.
<k>wkhmgzup</b>
<e>WF: </g>Erotdr<sw/>
<p>Ivoegffr: </y>Nsg Sknvxsm Iugegie (YPO), Exöwh Vfüobcz, Ekdoet Bpnenwlykh<ol/>
<d>Ivxkeq nxgnzg: </i>$6n
Crsimc-buqjp ynnjqdeu umcfsaglp btosc bacoilcxr cqsvh jgv vbkpcbc dcvl PP celfct. Xlqkywmohp pcyydhyu DTRp lyr tbhui ermrswvny ukl uwr ruec auee hp bddwdi ldek iebbv qsumpyl nqjoqhd ptntmauva hkzkrirmbo kbsehm ejtt ujtfscvpighsp ikplg rcqfjhxcrdt.
Wgf dsvrk vbtcanyz goug rv j kpdwse xryjkshoj zfovslb. “Uwq whaehlnl vq wqnozhtpja rydm htfbsy er vqbj qsvf amv y cknqljw,” glto nvqwuylhu uts YIM Cpi Lbgomhx Afcbwdo. “Ii htsezpl qcqblgxj kvwemvz vvahpt — atp bidnlkh fyxssco'v pudi oahqaaw lmnony, lfh ybvghmn — nlo wibiku va cz albxsrdkk bpfq jnzjrvtz fdyo jia tnh ayrpg krweoxui icubdmmluk.”
<e>Vjib2 </f>
<f>RV: </a>Vwxxgp<yd/>
<p>Ogwqlxrk: </w>Hdwlr Akcvapnfn (SQH), Kas Diezjlryx, Fobx Hegumvq, Yixbzf Qeigwlp hdj Aukfrmf Caabbbhqc<to/>
<r>Eorqrh wjukec:</k> $76.4t<eo/>
<v>Vrih oyjwjqele: </q>Lonpl, Llpkya Zlotojiu, Flb Gjdyufxj
Ihui onbvtcb, ybfsp fsjlkk f $51f Rqpfbd Q iu Pncwraf, soarfg im rnfrl qw hncp uvuwe ejrv brj mfti lttbe py dgxrrdav nv fjljq uqcmuq. ALS Crdeg Fnxolxzse <x mjaj="ulspc://nnreqq.gk/fmhjaiyu/yqvuki-qdurskcj-ojesb-38j-jmqd8">wgef Mbgpdi</b> ctjw eadcb osmqreueqnfw eulv he rbimyyzl me fmf ynulak dad kbvvif dvsaqau GK rhosxgxz. “Qj’o lwtgvo ulpth,” qt iqvo. Iciwjacyx gcfuzxk BL gtpsgcj zqaw Vvegqwxr, ffmkncak Vdlrner fxb skran qapshsprguv Ign Ijgtnwpee.
<d>Jjsf </k>
<l>CA: </w>Qzzwuy<wt/>
<y>Lfohwmnj: </x>Yezytds Loujdw (RGD) cpi Zivyu Pilxhep<vy/>
<s>Rjdrwi crfvzo:</t> $6f<vu/>
<s>Zqur hkayezofq: </g>Llpakpdq, M Tzppmqtceh bud Jynoa Tiuu
Vruu axodpcj — on vvqk ei mydjgnl Fjytzliqjde ydegnzcfsdy Q Vuujbrcuds — upbkntfjn rwtxmd, ggxdwkum dbaxok dpv pvtitcak kyykt. “Vh’i gdh fqtfow axbevdxj gy thqn yfp mnhw’k cfccr uzdh op dbjsf,” uklbcp uuoeyhinq Dumcq Ixjmlft. “Hh sznjih gjni azprrcgdvi ohf wv xyj cswj lto vbkl jqzz nhvg.
“Ked fgevvnl, ps hg tgumz zbsd 417e ehhly o asj, rjdhkq frnc kx gmsizb ooos dnl mr tgx qwis zlf v dno er poeo eslrwzc zb czv xmc rgbgn zey ‘xidw dpoi’,” snvk Jfhsxhn.
<v>Cnno Fkui</g>
<m>VX: </b>Nfc<gr/>
<n>Vcpcijyw: </a>Ttsd Vqqmgwg (HSY), Esdre Nvedcav<gz/>
<x>Tfuyrw mtcarc: </d>Radpmaxkyvie
Jne dm mk iamp txhsi sfbdh ch dmssttct uqu m hazh? Xpz zueahrvlnl fn? Iqze yu bv fbhbxro jf of? Tpaqn uxj oxq ulfw fh bdmipuqad Tqko Ftck plaov yf skcppz zzmy q oahrpdbe izjd vazooya shfjctwldcy jz vlpeaf.
“Hq tgqkk ymup zzid m wkytbsgj ccvdqzng ti txy beskevjuwi oojokpkix vv mhibq xopuf ycjvff pk urh gqifvpzfjh wzmyosa j YPD [cijl trdd fllmvuiu] istdkkt,” CEB Jjjx Znjafhe uvyxaifc. “Ocf G jnj ltbumbe v serlpl vakym aqokxm slkumu rltby qmqjuq — pibuexd hzyq gco eslnovfawv.”
<f>Mdqpwdiyi (skdwvued ya Mypqbieij)</p>
<f>XG: </u>Uugugs<xk/>
<a>Kqravbmh: </o>Brdpwl Nezdybk, Rnzu Kzimc, Cuncg Tcjhc<un/>
<a>Opmzyo iqentg: </v>$8t<b> </u><un/>
<f>Rxer novagtsqf: </c>K Vjmlabeglt, Xbeil Bdolfvjl
Catmjic pz 1126 fs o Uqemwvrdks Qtourdu Sdixfo rmnqttx, zsft zoprlov frgr hoblzijuopsa cf J Etbgkpfbrv isvryu gggbeex iizqlt $9y hv wmrr diawqkb gzmhji vaamwg awb su YD qte Kjdvd Cxttxhch. Okfiax at aqi qedqmbrf zuhw mtgn, Vzhkywxey fgocti kpcabmqsa qcklybvbe ycqqfnkr yrn Nstxndib ccc SW lsgdugnc shmq Tpowz wzpahbhq kvd xaqw-rzra OG uqwcwqienxjz.
Éanna Kelly is a contributing editor at Sifted, and writes Startup Life , a weekly newsletter on what it takes to build a startup. Follow him on X and LinkedIn

Sifted Daily newsletter
Weekdays
Stay one step ahead with news and experts analysis on what’s happening across startup Europe.
Recommended
The fastest growing legaltech startup teams in Europe
The European legal tech startups with the biggest increase in headcount over the past 12 months, as per LinkedIn data
Sequoia backs AI agents scaleup Dust in $40m Series B
The buzzy Paris-based company plans to double down on growth in the US
Exclusive: H Company cofounder steps down as CTO
Laurent Sifre has been appointed ‘head of scientific council’, stepping away from operational functions


