---
title: "Agent Anomaly Detection, now in Private Preview on the Gemini Enterprise Agent Platform"
description: "Agent Anomaly Detection is a reasoning-based oversight and audit layer for autonomous agents on the Gemini Enterprise Agent Platform, now in Private Preview. It analyzes existing reasoning traces, tool calls, execution flow, logs, and OpenTelemetry traces asynchronously, using a lightweight statistical pass followed by deeper LLM-based examination of flagged sessions. Its initial detectors cover tool misuse, identity and privilege abuse, cascading failures, rogue agents, resource exhaustion, and token usage escalation, with findings assigned severity, probability, explanations, and recommended fixes and surfaced in Security Command Center. In the Inventory Agent example, repeated large-batch, offset-jumping list_inventory calls are classified as systematic scraping and produce a Critical resource-exhaustion finding at 95% probability; an API can let ADK callbacks or plugins block later actions. Custom business logic detectors are described as coming soon."
---

# Agent Anomaly Detection, now in Private Preview on the Gemini Enterprise Agent Platform

[Google](https://yomu.fyi/company/google) · Achuth Narayan Rajagopal · Sep 16, 2026

**Type:** Announcement

## Summary

Agent Anomaly Detection is a reasoning-based oversight and audit layer for autonomous agents on the Gemini Enterprise Agent Platform, now in Private Preview. It analyzes existing reasoning traces, tool calls, execution flow, logs, and OpenTelemetry traces asynchronously, using a lightweight statistical pass followed by deeper LLM-based examination of flagged sessions. Its initial detectors cover tool misuse, identity and privilege abuse, cascading failures, rogue agents, resource exhaustion, and token usage escalation, with findings assigned severity, probability, explanations, and recommended fixes and surfaced in Security Command Center. In the Inventory Agent example, repeated large-batch, offset-jumping list\_inventory calls are classified as systematic scraping and produce a Critical resource-exhaustion finding at 95% probability; an API can let ADK callbacks or plugins block later actions. Custom business logic detectors are described as coming soon.

## Context

Agent Anomaly Detection is in Private Preview for teams deploying agents on the Gemini Enterprise Agent Platform with ADK 1.2 or later. After prerequisites are met, it can be enabled through one-click provisioning.

## Approach / What changed

The detection pipeline first scans all traffic with a lightweight statistical pass to identify anomalous sessions. An LLM-based reasoning layer then examines flagged sessions in depth, and a third layer can reconstruct individual tool calls and offsets when closer analysis is needed. Findings can be reviewed in Security Command Center or retrieved through an API for programmatic intervention.

## Takeaways

- Detection runs asynchronously and out of band from the live request path, so it does not add runtime latency to agent responses.
- Initial detectors address tool misuse, identity and privilege abuse, cascading failures, rogue agents, resource exhaustion, and token usage escalation, with mappings to OWASP Agentic Top 10 categories where applicable.
- An ADK callback or plugin can retrieve session anomalies and block subsequent tool calls or halt the next turn when severity and probability cross a configured threshold.

## FAQ

### How does Agent Anomaly Detection examine large volumes of agent activity?

A lightweight first pass scans all traffic for statistical anomalies and flags sessions for deeper analysis. An LLM-based layer reasons through those sessions, while a third layer can reconstruct individual tool calls and offsets when needed.

### What happens after an anomaly is detected?

Findings include severity, probability, a plain-language explanation, and recommended fixes, and are published to Security Command Center for triage. An API also allows ADK callbacks or plugins to use the finding to block later tool calls or halt the next turn.

### Which agents can use Agent Anomaly Detection during the preview?

It is available in Private Preview for teams deploying agents on the Gemini Enterprise Agent Platform with ADK 1.2 or later. Prerequisites must be completed before enabling it through one-click provisioning.

**Tags:** [Agent Development Kit](https://yomu.fyi/topic/agent-development-kit), [AI Agents](https://yomu.fyi/topic/ai-agents), [Observability](https://yomu.fyi/topic/observability), [Security](https://yomu.fyi/topic/security)

- Source: [Google](https://developers.googleblog.com/agent-anomaly-detection-now-in-private-preview-on-the-gemini-enterprise-agent-platform)
- Source URL: https://developers.googleblog.com/agent-anomaly-detection-now-in-private-preview-on-the-gemini-enterprise-agent-platform
- Ingested by Yomu: 2026-09-16T20:00:47.057Z

[Read original post](https://developers.googleblog.com/agent-anomaly-detection-now-in-private-preview-on-the-gemini-enterprise-agent-platform)