Security companies are scrambling to build products that can monitor not just agents but also the tools and add-ons they use.