JPMorgan Chase’s chief information security officer is urging companies to restrict anonymous access to their services. He argues that public services allow unauthenticated, attacker-controlled AI agents to interact with company systems.
Pat Opet, who lists his role as security at JPMorgan and Chase, posted on X that firms should “be evaluating your options to abstract your companies services from the internet.” He asked: “why allow an unauthenticated anonymous agent of an attacker to interact with your systems?” His closing line was: “consider your architectural levers now, you’re going to need them.”
This is architecture advice, not a JPMorgan product launch. OpenAI president Greg Brockman quote-reposted it. Brockman wrote: “security architecture fundamentals are more important than ever before.”
What “abstract from the internet” means
In this architecture, protected services are reached through authenticated gateways or private networks rather than directly by anonymous internet traffic. Authentication establishes an identity; authorisation limits which functions that identity can access.
Opet expanded on that in a follow-up reply the same day. Segmenting at the identity layer, he wrote, means “an authenticated attacker is only authorized to see specific pages/functions/endpoints.” When abuse appears, the response can be “an automated account suspension with a total failure blast radius of one,” returning the attacker to the outside.
Investor Ed Sim called the same idea “private by default.” Companies spent decades making everything reachable and bolting security on afterwards, he said. With autonomous AI agents, they may spend the next decade making only what needs to be reachable visible at all.
How that differs from bank agent lockouts
Opet is talking to security teams about public attack surface. JPMorgan has already taken a different step on the retail side: it blocks third-party AI agents that try to operate inside customer bank accounts.
On the bank’s third-quarter earnings call in October, CNBC reported, CEO Jamie Dimon told analysts: “We’re not going to allow just any … outside agent to come in inside the company, because it’s just too risky for clients and for JPMorgan.” He added: “You don’t want rogue agents, and it could be thousands of them.”
A JPMorgan spokeswoman confirmed the policy to CNBC. “Protecting our customers is our top priority. Because it is not safe, we do not permit third parties to access accounts by obtaining customers’ banking credentials and logging in on their behalf,” she said. The bank still supports “secure, customer-authorized data sharing through open banking providers” and says it wants to enable “agentic connections securely.” There is no public timeline for when agents could act directly on accounts.
According to CNBC, agents may still see limited Chase data such as balances through connectors like Plaid on a read-only basis, but cannot send money or pay bills. Later CNBC coverage said Amazon, Charles Schwab and Kohl’s have taken related steps against outside shopping or finance agents. The Information reported that some smaller banks are experimenting with dedicated agent accounts, spending limits and virtual cards. That detail sits behind a paywall and is noted here only as industry context, not as independently verified product documentation.
Dimon also put customers on notice. “If people are using them, they should understand the risk,” he said. “They should understand there’s a liability transfer.”
Identity segmentation and customer access
Opet’s proposal limits what each authenticated identity can access and uses account suspension to contain abuse. That is the “blast radius of one” Opet described: contain damage without taking the whole product offline.
Opet’s posts are industry guidance from a CISO, not a regulatory mandate or a product announcement.
Sources
- Pat Opet on X
- Pat Opet follow-up on identity-layer segmentation
- Greg Brockman on X
- Ed Sim on X (“private by default”)
- CNBC: JPMorgan blocks outside AI agents
- CNBC: banks and retailers vs AI agents
- The Information on X (paywalled story pointer)
Discover more from Sulat AI & Tech News
Subscribe to get the latest posts sent to your email.
