Norton, part of Gen Digital (NASDAQ: GEN), launched the beta of Norton AI Agent Protection in Norton 360 on April 9. The product is the first consumer cybersecurity offering designed specifically to monitor and control what AI agents do on a user’s device.

The product introduces what Gen Digital calls a “trust layer” between an AI agent’s decisions and their execution. It operates in three tiers: safe actions proceed without interruption, confirmed threats are blocked automatically, and suspicious actions are paused for the user to review before they execute.

“People are giving AI agents significant access to their machines, accounts and personal information because that’s what makes them powerful,” Travis Witteveen, Head of Products and Portfolios at Gen, said in the company announcement. “But until now, there’s been no way to verify what those agents are about to do and the potential harm they could cause with one bad decision or click.”

The Threat Driving the Product

Gen’s Threat Labs identified “approximately hundreds of malicious skills in public agent registries,” according to the press release. The release describes the risk as distinct from traditional malware: a compromised AI agent does not simply infect a file. It makes decisions and takes actions, meaning a single manipulated instruction can trigger immediate real-world consequences.

The distinction matters because it defines the product’s architecture. Traditional antivirus scans files and monitors processes for known malicious signatures. Norton AI Agent Protection monitors the decision-to-execution pipeline of AI agents: what the agent intends to do, whether that action falls within safe boundaries, and whether the user should be asked to approve it before it runs.

Compatibility and Availability

Norton AI Agent Protection currently works with Claude Code, Cursor, and OpenClaw on Windows. Mac support is planned. The beta is available to existing Norton 360 subscribers at no additional cost.

The product was developed by Gen Threat Labs and Gen AI Foundry, the team building Gen Digital’s next-generation AI security products. Gen describes it as part of a broader “Agent Trust Layer” initiative, with plans to expand security coverage from agent verification through execution.

Consumer Market Signal

Norton’s entry into AI agent security carries a market signal beyond the product itself. Enterprise-focused solutions from companies like Palo Alto Networks and CrowdStrike have been building agent security capabilities for months. Norton’s consumer launch suggests the threat has crossed from enterprise security teams and developer workflows into the mainstream. When an antivirus brand with tens of millions of consumer subscribers builds a product category around AI agent oversight, the adoption of autonomous agents on consumer devices has reached a scale that requires dedicated protection.