Gartner® Report:
Hype Cycle™ for Application Security, 2026
Where AI agent bot management and client-side protection sit on the 2026 curve
This report covers:
- Why AI agent bot management is on the rise
- How PCI DSS 4.0.1 raises the client-side stakes
- Which innovations to adopt, and when
Legacy bot management
cannot read agent intent
CHEQ is named in two categories that describe one surface from different angles: which agents reach your logins and checkouts, and which scripts run in your customers’ browsers.
Frequently Asked Questions
What is AI agent bot management?
AI agent bot management is the practice of identifying AI agents on customer-facing surfaces, assessing their intent, and enforcing policy on what each one is allowed to do. It applies to logins, checkouts, forms and product pages. It differs from traditional bot management, which was built to separate humans from automated traffic rather than to evaluate agents acting on a person’s behalf. Gartner® tracks it as an emerging innovation in the Hype Cycle™ for Application Security, 2026, where CHEQ is named a Sample Vendor.
How are AI agents different from bots?
An AI agent acts on behalf of a specific person. A bot does not. That distinction breaks legacy detection, which was built to answer only whether traffic is human or automated. Agents also arrive from a small number of shared AI platforms, so they look alike regardless of who sent them or why, and no standard yet binds a human identity to the agent acting for them. A retailer cannot separate a shopping agent sent by a real customer from one scraping prices. A bank cannot confirm whether the account holder authorised the agent using their credentials.
Where is CHEQ named in the Gartner® Hype Cycle™ for Application Security, 2026?
CHEQ is named in two categories in the Gartner® Hype Cycle™ for Application Security, 2026: AI Agent Bot Management, which Gartner® positions On the Rise, and Web App Client-Side Protection, listed as CHEQ (Ensighten). Gartner® Sample Vendor lists illustrate a category and are not an endorsement, ranking, or recommendation. Complete the form for complimentary access to the reprint.