AI Security Starts below the model

61% of enterprises running AI agents share credentials across them — and only 14% can revoke an agent's access within minutes if something goes wrong. This is the infrastructure security debt that's accumulating underneath every AI deployment. Nir Chervoni, Head of Security Products at Nebius, lays out exactly what must be locked down before a model or agent ever runs: per-agent identity scoped like a human user account, short-lived credentials stored in a secrets manager (not prompts or env vars), encryption keys under customer control, and audit trails feeding directly into SIEM. His founda