Intelligence Hub | Category Market Intelligence

Decision at a glance

Top move

Identity governance needs structural change: AI speeds attacks so scoped, time-limited credentials and continuous monitoring are now procurement must-haves for high-access systems rather than optional features

Key takeaways

Identity governance needs structural change: AI speeds attacks so scoped, time-limited credentials and continuous monitoring are now procurement must-haves for high-access systems rather than optional features.[1]
Home batteries and inverters are now regulated as network-connected consumer energy devices, turning many installer relationships into third-party integrations with write access that must be inventoried and contracted for compliance.[2]
Google adding Antigravity to Gemini Enterprise creates a practical procurement route to consolidate AI coding agents into a single subscription with admin, spend and audit controls — check license overlap and governance impact before renewing separate tools.[3]

Why this matters for the category manager

Identity governance needs structural change: AI speeds attacks so scoped, time-limited credentials and continuous monitoring are now procurement must-haves for high-access systems rather than optional features. Home batteries and inverters are now regulated as network-connected consumer energy devices, turning many installer relationships into third-party integrations with write access that must be inventoried and contracted for compliance. Google adding Antigravity to Gemini Enterprise creates a practical procurement route to consolidate AI coding agents into a single subscription with admin, spend and audit controls — check license overlap and governance impact before renewing separate tools. Vendor commercial programs are shifting: Cohesity's updated partner incentives and services specialisation will nudge renewals and partner selection toward services-led suppliers with rebate and renewal advantages; include partner economics in evaluation criteria

What changed

Google now bundles the Antigravity coding agent into Gemini Enterprise subscriptions, offering a procurement path to consolidate developer AI tooling (article 8).
Cohesity expanded partner incentives and added a professional services specialisation that changes renewal incumbency and rebate dynamics in Australian data-security procurement (article 11).
Security leadership commentary shifted from general AI risk to explicit calls for continuous identity governance rather than annual assessment cycles, raising requirements for identity controls in RFPs (article 1).

Category impact

Cost / money

Continuous monitoring and tighter identity controls are likely to shift spend toward managed detection or identity governance services as buyers seek faster detection and remediation.[1]
Bundling developer AI agents into cloud enterprise subscriptions can reallocate licence spend from standalone tooling to vendor platform OPEX and pooled billing controls, changing renewal negotiation levers.[3]

Supplier / commercial

Cohesity's rebate and renewal incumbency changes favour partners offering services-led delivery, which can reduce buyer leverage in renewals unless procurement re-weights evaluation criteria to prioritize competitive pricing and marketplace alternatives.[4]
Installers and vendors demonstrably able to show compliance for home batteries and inverters will gain commercial advantage in procurement conversations; legacy or opaque suppliers face remediation or replacement cost conversations.[2]

Safety / operations

Devices with supplier write access (home batteries, inverters) become operational security dependencies; a compromised fleet or misconfigured firmware can impact site uptime and grid-interfacing operations.[2]
Agentic AI and automated probes can compress attack timelines to minutes, meaning operations must enforce scoped access and rapid revocation processes to prevent fast lateral movement.[1]

What to watch

Antigravity and similar agent-capable tools bundled into enterprise platforms can accelerate embedding of agentic workflows into CI/CD and developer pipelines — watch for gaps in governance, token management, and audit trails.[3]
Regulation makes already-deployed battery fleets subject to compliance checks; buyers often inherit deployed non-compliant stock, so verify installed-device provenance and vendor remediation commitments before accepting transfers or renewals.[2]

Category manager actions

Action detail for this brief

Today's priorities

Inventory all supplier-managed energy devices and list those with remote write access.

because new rules treat home batteries and inverters as network-connected devices and because supplier write access creates direct operational risk and compliance obligations.

Due 3d

high

Pull current licences and procurement records for AI coding and agent tools to map overlaps with Gemini Enterprise subscriptions.

because Google now includes Antigravity in Gemini Enterprise and because consolidation could change licensing OPEX and administrative controls available to buyers.

Due 3d

high

Update RFP/SOW templates to require scoped agent access, time-limited credentials, audit logs, and rapid revocation clauses for AI agents and service accounts.

because AI-powered probes compress attack timelines and because contractual SOWs are the primary lever to enforce operational identity controls.

Due 21d

high

Supplier radar

SecurityBrief Australia

high

Observed supplier signal

Cohesity's rebate and renewal incumbency changes favour partners offering services-led delivery, which can reduce buyer leverage in renewals unless procurement re-weights evaluation criteria to prioritize competitive pricing and marketplace alternatives.

Commercial implication

Cohesity's rebate and renewal incumbency changes favour partners offering services-led delivery, which can reduce buyer leverage in renewals unless procurement re-weights evaluation criteria to prioritize competitive pricing and marketplace alternatives.

Next step: Validate the source-backed signal with incumbents and alternates before the next award or pricing decision.

SecurityBrief Australia

high

Observed supplier signal

Installers and vendors demonstrably able to show compliance for home batteries and inverters will gain commercial advantage in procurement conversations; legacy or opaque suppliers face remediation or replacement cost conversations.

Commercial implication

Installers and vendors demonstrably able to show compliance for home batteries and inverters will gain commercial advantage in procurement conversations; legacy or opaque suppliers face remediation or replacement cost conversations.

Next step: Validate the source-backed signal with incumbents and alternates before the next award or pricing decision.

Negotiation levers

Lever

Inventory all supplier-managed energy devices and list those with remote write access.

Use when

because new rules treat home batteries and inverters as network-connected devices and because supplier write access creates direct operational risk and compliance obligations.

Expected outcome

Prioritised register of on-site energy devices with supplier access and documented compliance status for contract review

high confidence

Lever

Pull current licences and procurement records for AI coding and agent tools to map overlaps with Gemini Enterprise subscriptions.

Use when

because Google now includes Antigravity in Gemini Enterprise and because consolidation could change licensing OPEX and administrative controls available to buyers.

Expected outcome

Consolidation matrix showing licence overlap and potential to move spend into enterprise subscriptions with admin controls

high confidence

Lever

Update RFP/SOW templates to require scoped agent access, time-limited credentials, audit logs, and rapid revocation clauses for AI agents and service accounts.

Use when

because AI-powered probes compress attack timelines and because contractual SOWs are the primary lever to enforce operational identity controls.

Expected outcome

Revised procurement templates that evaluators can use to score identity governance and agent-control capabilities during vendor selection

high confidence

Talking points

Identity governance needs structural change: AI speeds attacks so scoped, time-limited credentials and continuous monitoring are now procurement must-haves for high-access systems rather than optional features.

Home batteries and inverters are now regulated as network-connected consumer energy devices, turning many installer relationships into third-party integrations with write access that must be inventoried and contracted for compliance.

Google adding Antigravity to Gemini Enterprise creates a practical procurement route to consolidate AI coding agents into a single subscription with admin, spend and audit controls — check license overlap and governance impact before renewing separate tools.

Recommended actions

Do now

Inventory all supplier-managed energy devices and list those with remote write access.
Why: because new rules treat home batteries and inverters as network-connected devices and because supplier write access creates direct operational risk and compliance obligations.
Owner: Ops
Expected outcome: Prioritised register of on-site energy devices with supplier access and documented compliance status for contract review
[2]
Pull current licences and procurement records for AI coding and agent tools to map overlaps with Gemini Enterprise subscriptions.
Why: because Google now includes Antigravity in Gemini Enterprise and because consolidation could change licensing OPEX and administrative controls available to buyers.
Owner: Category
Expected outcome: Consolidation matrix showing licence overlap and potential to move spend into enterprise subscriptions with admin controls
[3]

Next few weeks

Update RFP/SOW templates to require scoped agent access, time-limited credentials, audit logs, and rapid revocation clauses for AI agents and service accounts.
Why: because AI-powered probes compress attack timelines and because contractual SOWs are the primary lever to enforce operational identity controls.
Owner: Contracts
Expected outcome: Revised procurement templates that evaluators can use to score identity governance and agent-control capabilities during vendor selection
[1]
Engage Cohesity and shortlisted partners to clarify rebate mechanics, renewal incumbency rules and professional services pricing for upcoming renewals.
Why: because partner incentives and new specialisations can shift negotiation leverage and because understanding rebate and renewal mechanics reduces commercial surprises at renewal...
Owner: Contracts
Expected outcome: Documented partner commercial terms and a negotiation plan highlighting where rebates affect total cost of ownership
[4]

Watch

Negotiate contract addenda with energy-device suppliers to require firmware transparency, security attestations and fixed remediation or replacement obligations for non-complian...
Why: because compliance rules now cover deployed batteries and inverters and because explicit contractual remediation obligations transfer operational risk back to suppliers.
Owner: Contracts
Expected outcome: Contract clauses that allocate remediation responsibilities and require supplier-provided compliance evidence at delivery and during renewals
[2]
Run procurement rounds prioritising developer tooling bundles that provide pooled billing, admin controls and audit functions to reduce shadow-tool risk.
Why: because bundling of Antigravity into Gemini Enterprise creates an on-ramp to consolidate coding agents and because pooled controls can improve governance and reduce licence sprawl.
Owner: Category
Expected outcome: Shortlist of supplier approaches showing governance controls, pooled billing options, and implementation notes for migration planning
[3]

What to watch

Antigravity and similar agent-capable tools bundled into enterprise platforms can accelerate embedding of agentic workflows into CI/CD and developer pipelines — watch for gaps in governance, token management, and audit trails
Regulation makes already-deployed battery fleets subject to compliance checks; buyers often inherit deployed non-compliant stock, so verify installed-device provenance and vendor remediation commitments before accepting transfers or renewals
Antigravity and similar agent-capable tools bundled into enterprise platforms can accelerate embedding of agentic workflows into CI/CD and developer pipelines — watch for gaps in governance, token management, and audit trails.: Antigravity and similar agent-capable tools bundled into enterprise platforms can accelerate embedding of agentic workflows into CI/CD and developer pipelines — watch for gaps in governance, token management, and audit trails
Regulation makes already-deployed battery fleets subject to compliance checks; buyers often inherit deployed non-compliant stock, so verify installed-device provenance and vendor remediation commitments before accepting transfers or renewals.: Regulation makes already-deployed battery fleets subject to compliance checks; buyers often inherit deployed non-compliant stock, so verify installed-device provenance and vendor remediation commitments before accepting transfers or renewals
Identity governance needs structural change: AI speeds attacks so scoped, time-limited credentials and continuous monitoring are now procurement must-haves for high-access systems rather than optional features
Home batteries and inverters are now regulated as network-connected consumer energy devices, turning many installer relationships into third-party integrations with write access that must be inventoried and contracted for compliance
Google adding Antigravity to Gemini Enterprise creates a practical procurement route to consolidate AI coding agents into a single subscription with admin, spend and audit controls — check license overlap and governance impact before renewing separate tools
Vendor commercial programs are shifting: Cohesity's updated partner incentives and services specialisation will nudge renewals and partner selection toward services-led suppliers with rebate and renewal advantages; include partner economics in evaluation criteria

Market pulse

Index	Latest	Change	As of
Palo Alto (PANW)	320	+0.00 (+0.00%)	Aug 22, 2026, 10:08 PM
CrowdStrike (CRWD)	285	+0.00 (+0.00%)	Aug 22, 2026, 10:08 PM
Zscaler (ZS)	195	+0.00 (+0.00%)	Aug 22, 2026, 10:08 PM
Fortinet (FTNT)	72	+0.00 (+0.00%)	Aug 22, 2026, 10:08 PM

Palo Alto: Identity and NGFW vendors become more relevant as buyers shift toward continuous identity governance and faster detection controls (monitor for product telemetry and identity integrations)
CrowdStrike: Endpoint and detection vendors are a procurement focus as continuous monitoring expectations rise; evaluate managed detection and response offerings during renewals

Evidence and sources

Inline citations jump here. Expand a source to read stored evidence excerpts.

[1] When AI accelerates the threat, identity governance cannot afford to stand still

securitybrief.com.au · n.d.

Original linkExpand

Source excerpts

AI agents must operate within clearly defined boundaries, including scoped access, time-limited credentials and continuous monitoring

It goes to the question of identity governance

Building for Governance Safe interaction between AI systems, sensitive data and critical infrastructure requires governance to be designed in from the outset, not retrofitted after deployment. AI agents must operate within clearly defined boundaries, including scoped access, time-limited credentials and continuous monitoring

Open original source

[2] Australia's home batteries are now a cybersecurity compliance issue

securitybrief.com.au · n.d.

Original linkExpand

Source excerpts

The Legislation Behind the Shift The Cyber Security Act 2024, which came into force in late 2024, extended baseline protections to what the legislation calls consumer energy resources, a category that explicitly includes home batteries and the smart inverters that manage them. A companion set of rules, the Cyber Security (Security Standards for Smart Devices) Rules 2025, took effect in March 2026 and sets a mandatory security baseline for consumer-grade internet-connected devices more broadly, with batteries a

A companion set of rules, the Cyber Security (Security Standards for Smart Devices) Rules 2025, took effect in March 2026 and sets a mandatory security baseline for consumer-grade internet-connected devices more broadly, with batteries and inverters sitting squarely inside that definition for the first time. For an industry used to thinking about smart TVs and doorbell cameras as the entry-level IoT compliance conversation, home energy hardware capable of interacting with the grid is a meaningfully different r

Rules tend to arrive well after the installed base has already grown large enough to matter, which means the compliance conversation right now is playing catch-up on millions of devices already deployed, not just the ones going in tomorrow

Open original source

[3] Google adds Antigravity to Gemini Enterprise subscriptions

securitybrief.com.au · n.d.

Original linkExpand

Source excerpts

Administrators can opt into overage billing with monthly spend caps if pooled quotas are exhausted

With Gemini Enterprise and next-generation developer tools like Antigravity 2

Google has made Antigravity available through eligible Gemini Enterprise subscriptions, bringing the coding agent into its enterprise software bundle with administrative and spending controls

Open original source

[4] Cohesity adds partner incentives & services specialisation

securitybrief.com.au · n.d.

Original linkExpand

Source excerpts

Cohesity has expanded its Aspire Global Partner Program with new incentives, simpler requirements and a Professional Services Specialisation, aimed at partners building services-led and recurring-revenue data security businesses. The updated program broadens rebates for customer deals, changes some training and certification requirements, and adds a new dashboard in the partner portal

Cohesity has expanded its Aspire Global Partner Program with new incentives, simpler requirements and a Professional Services Specialisation, aimed at partners building services-led and recurring-revenue data security businesses

By simplifying the program, expanding incentives and introducing new Specialisations, we're giving partners more ways to grow, differentiate and deliver greater value to customers across Australia and New Zealand," said Eagleton. Simpler process Another part of the update is a reduction in training and certification requirements in selected regions and partner tiers

Open original source

[5] Palo Alto

finance.yahoo.com · n.d.

Original linkExpand

No stored excerpt is attached to this source.

Open original source

[6] CrowdStrike

finance.yahoo.com · n.d.

Original linkExpand

No stored excerpt is attached to this source.

Open original source

Tighten Controls Around AI Agents, Identity and Energy Devices

Decision at a glance

What changed

Category impact

Cost / money

Supplier / commercial

Safety / operations

What to watch

Action detail for this brief

Today's priorities

Supplier radar

Negotiation levers

Talking points

Recommended actions

Do now

Next few weeks

Watch

Top stories

When AI accelerates the threat, identity governance cannot afford to stand still

Australia's home batteries are now a cybersecurity compliance issue

Google adds Antigravity to Gemini Enterprise subscriptions

Cohesity adds partner incentives & services specialisation

Market pulse

Evidence and sources