Unattended automation is a workflow that runs without a person actively driving it. It is usually started by a schedule, a queue event, an API trigger, or a system condition, and it often runs under a service account or bot identity. In enterprise environments, this can include RPA jobs, batch processing, file transfers, ticket routing, or compliance checks that must execute consistently and at scale.
In cyber security, unattended automation matters because it concentrates power in systems that may have broad access and limited human oversight. Attackers may target the credentials, scripts, or orchestration platform behind these jobs to steal data, move laterally, or abuse trusted automation for persistence. Defenders use the same model for patching, log enrichment, alert triage, backup validation, and incident response tasks. Good security practice includes least privilege, strong secrets management, logging, approval gates for sensitive actions, and monitoring for abnormal job behavior.