Identity, autonomy and the pipes: GITEX’s agentic reality check

Identity, autonomy and the pipes: GITEX’s agentic reality check

At GITEX 2025, the demos felt different – fewer sandboxes, more live systems. CIOs were asked to see agents operating on their own data, not in a vendor’s slide presentation environment – and unusually, they got precisely that. The common thread was simple: put AI where the work already happens, then measure cycle time, risk and throughput rather than vibes.

Three stacks captured that pivot. Oracle built agents into the core of Fusion so they acted inside approvals, procure-to-pay and recruit-to-hire. CrowdStrike pushed identity-aware defence to machine speed as attackers turned to faster breakouts and deepfake-assisted social engineering.

Robocore showed how hospital-grade robots compressed wait times by keeping doctors in clinics and patients on-site. Türkiye’s Bimser, meanwhile, made the case that low-code was still the plumbing most organisations lacked – the connective tissue that let the clever bits talk to each other.

Oracle: agents inside the flow of work

“Agentic AI only creates durable value when it is native to the systems that run your business,” Yassin El Bakiouli, Vice President – Business Applications, Gulf region, Oracle, said. “That’s why we embedded agents directly inside Oracle Fusion across ERP, HCM and Finance.

They inherit your roles and policies, operate with full process context and can take actions – not just make suggestions.”

For customers already on Fusion, El Bakiouli said the capability was tangible. “You have around fifty out-of-the-box agents live for HR, procurement and finance, with roughly fifty to one hundred more landing each quarter.

A CIO can ask to see it and we light up agents on their data – initiate supplier onboarding, compile spend analysis, guide recruiters, in their environment.” On control and safety, he was clear: “Security is non-negotiable. We constrain agents to approved data and actions and keep a human in the loop for final checks. The goal is to accelerate work safely – not remove accountability.”

CrowdStrike: defence that assumed the user was the new perimeter

“Breakout times collapsed from days to seconds,” Yassin Watlal, Head of Systems Engineering and Solution Architecture, Middle East, Turkey and Africa, CrowdStrike, said. “Volume and sophistication were up, and AI was helping adversaries localise phishing and automate lateral movement. Our job with Falcon was to see and stop that behaviour in real time across endpoints and identities.”

AI was the accelerator but not the arbiter. “AI gave speed and scale – high-velocity correlation, autonomous actions, instant enrichment,” Watlal said. Humans still asked the ‘what if’ questions, defined patterns worth hunting and made the judgment calls. “We let AI do the heavy lifting and kept analysts in the loop for validation and complex investigations.” The priority was identity-centred control without blanket friction. “Routine access stayed smooth. The moment something looked off we stepped up authentication, isolated sessions or auto-remediated.”

Understaffed SOCs, he added, could lean on agentic automation immediately.

“We released seven agentic AI capabilities – from exposure prioritisation to hunt assistance and alert triage. Customers could also compose task-specific agents via an agent workforce model. The destination was an autonomous-leaning SOC where AI executed routine work at machine speed and people focused on edge cases.”

Robocore: robots that bought back clinician time

“Every market was ageing and clinical capacity was under pressure,” Roy Lim, CEO of Robocore, said. “Our robots lived in nursing homes. Doctors stayed in their clinics and examined patients through the robot using medical-grade peripherals, such as stethoscopes, blood pressure sensors and vital-sign monitors. We cut doctor-to-patient time from hours to minutes and lifted daily throughput from five patients to dozens.”

The fleet was built for crowded corridors and real hospitals. “We fused LiDAR with 3D depth cameras for obstacle avoidance and orchestrated fleets through our Spine platform,” Lim explained. “Two robots meeting nose-to-nose in a corridor didn’t stalemate – one backed out. Spine integrated with lifts and building signals and could even dispatch a cleaning unit if CCTV detected a coffee spill.”

Privacy was by design. “Navigation ran on-device for resilience. Speech and vision analytics could run in the cloud when needed, but we didn’t retain patient audio or video by default – we acted like a secure call. Vital signs streamed live to clinicians who decided what to store.”

Bimser (Türkiye): low-code as the connective tissue

“Being at GITEX mattered because the Middle East was building at pace,” Murat Atici, CEO, Bimser, said. “Our focus was simple – give enterprises a trusted low-code backbone that connected systems, removed manual hand-offs and brought AI into everyday decisions. We were there to partner with customers who wanted measurable results, not just promises.”

He framed the regional brief as execution, not experiments. Bimser helped teams move from pilot to scale without disruption by unifying content, workflow and compliance across finance, HR and operations, so everyone worked from the same source of truth.

In practice, that meant quicker approvals, cleaner audits and fewer errors – with leaders gaining the visibility to act. The platforms are integrated with existing ERP and SaaS estates and can be deployed in the cloud, on-premises, or in a hybrid configuration to respect data governance and residency requirements.

The company also localised where it mattered — Arabic interfaces, regional templates and partner support on the ground — because the success of transformation sat in such details. The outcome, Atıcı argued, was pragmatic change: shorter cycle times, stronger compliance and the ability to adapt processes in days rather than months.

The through-lines

  • Native beat bolt-on. Oracle’s agents lived inside Fusion processes. CrowdStrike’s controls travelled with identity and endpoint. Robocore’s autonomy tied into lifts, corridors and CCTV. Integration was the differentiator.
  • Identity was gravity. Whether a finance approval, a privileged login or a tele-consult, who acted determined risk and response. Agentic systems needed live identity context to act safely.
  • Human oversight where it counted. Final checks in finance, analyst judgement in the SOC, clinician sign-off in care — each stack kept a person in the loop while letting AI do the repeatable work.

El Bakiouli put it plainly: “Insist on live demonstrations in your environment and measure the cycle-time impact. That’s how you separate reality from rhetoric.” Watlal was blunt on defence: “Let machines handle the repetitive work so humans can fight the hard fights.”

Lim brought it back to outcomes that mattered: “If we could turn hours into minutes for a patient consult, that wasn’t just efficiency — it was access.” And Atıcı added the operational mandate: organisations in the region didn’t just need smarter tools; they needed “a backbone that made transformation executable.”

Browse our latest issue

Intelligent CIO Middle East

View Magazine Archive