AI Agent Security
Cisco AI Defense Alternatives for AI Agent Security
Cisco AI Defense alternatives as of October 2026: what the product covers, where Cisco is strong, and which category fits when you need agent-level control.
Blog
Insights & updates
AI agent security, identity, governance, cost, and the engineering behind the control plane.
AI Governance & Compliance
Credo AI and Holistic AI Alternatives for AI Governance
Credo AI and Holistic AI as of October 2026: how the two AI governance platforms compare, where each is strong, and when a runtime control plane fits too.
AI Agent Security
Lasso Security Alternatives for AI Agent Security
Lasso Security alternatives as of October 2026: discovery, red teaming and inline protection, its open-source MCP gateway, and how other categories compare.
Identity & Access
Microsoft Entra Agent ID Alternatives and Complements
Microsoft Entra Agent ID as of October 2026: what agent identities, Conditional Access and ID Protection do for agents, and what a control plane adds.
AI Agent Security
Pangea Alternatives for AI Guardrails and Agent Security
Pangea alternatives as of October 2026: AI Guard and Pangea's security APIs, the CrowdStrike deal, and which category fits when you need more than guardrails.
AI Agent Security
Prisma AIRS Alternatives for AI Agent Security
Prisma AIRS alternatives as of October 2026: what Palo Alto Networks' AI security platform covers, where it is strong, and when an agent control plane fits.
AI Agent Security
AI Red Teaming Tools Compared: garak vs PyRIT vs promptfoo
garak scans models, PyRIT scripts multi-turn attacks, promptfoo tests applications. What each finds, what none of them see, and how to close the agent gap.
AI Agent Security
Are Pickle Model Files Safe? Safetensors vs Pickle
Pickle model files can run arbitrary code the moment they load. Why scanners miss payloads, how safetensors fixes it, and how to gate what agents load.
AI Agent Security
What Is ASCII Smuggling? Invisible Unicode Injection
ASCII smuggling hides prompt-injection instructions and exfiltrated data in invisible Unicode tag characters. How it works and how to strip it both ways.
AI Agent Security
Can LLMs Leak Their Training Data? Memorization Attacks
LLMs memorise parts of their training data and can be prompted to emit it verbatim. How extraction attacks work and the controls for fine-tunes and outputs.
AI Governance & Compliance
Can You Monitor Employee AI Usage Under GDPR?
Yes, if monitoring is proportionate, transparent and focused on what AI systems do, not on people. A GDPR checklist covering DPIA, works councils and logs.
AI Agent Security
Computer-Use Agents: Security Risks of AI That Clicks
Computer-use agents see the screen and drive mouse and keyboard with your session. Isolate them in a VM, allow-list actions, and gate irreversible steps.
AI Agent Security
Does Fine-Tuning Break an LLM's Safety Guardrails?
Often, yes. A few examples can erode refusals and narrow tasks can cause emergent misalignment. Re-test every fine-tune and keep guardrails outside the model.
AI Agent Security
EchoLeak Explained: The Zero-Click M365 Copilot Exploit
EchoLeak (CVE-2025-32711) let one email make Microsoft 365 Copilot leak data with no user click. How the chain worked and which controls break it.
AI Governance & Compliance
Are Vector Embeddings Personal Data? Inversion Attacks
Embedding inversion can reconstruct text from vectors, so treat embeddings of personal data as personal data: erasure, residency and access duties apply.
AI Governance & Compliance
EU AI Act AI Literacy (Article 4): What Companies Must Do
Article 4 of the EU AI Act asks providers and deployers to support staff AI literacy. What it requires, how to evidence it, and how it ties to agent approvals.
AI Governance & Compliance
EU AI Act Article 73: Serious Incident Reporting Guide
Article 73 of the EU AI Act sets 2, 10 and 15-day clocks for reporting serious incidents with high-risk AI. What counts, who reports, and the evidence to keep.
Platform & Operations
How to Govern ChatGPT and Claude Connectors
ChatGPT and Claude connectors link chat assistants to company data, often past IT review. Allow-list, scope and audit them like any other MCP server.
AI Agent Security
How to Create an AI-BOM: CycloneDX vs SPDX
An AI bill of materials lists the models, datasets, tools and MCP servers an AI system depends on. How to build one, and CycloneDX ML-BOM vs SPDX 3.0.
AI Agent Security
How Do You Measure Guardrail Accuracy and False Positives?
Measure guardrails on block precision, recall, latency and bypass rate. Build a test set, replay real traffic in shadow mode, then set thresholds per policy.
AI Governance & Compliance
How to Set Up an AI Governance Committee
Set up an AI governance committee with a charter, RACI and meeting cadence. The committee decides policy; a control plane enforces it and feeds the board pack.
AI Agent Security
How Do You Stop Employees Pasting Data into ChatGPT?
Blocking ChatGPT drives use underground. Give staff a sanctioned path through a gateway with block and redact guardrails, then close the side doors.
AI Agent Security
How to Threat Model an AI Agent (MAESTRO vs STRIDE)
A step-by-step AI agent threat model: map the layers with MAESTRO, enumerate threats per component with STRIDE, rank by blast radius and record the controls.
AI Agent Security
Human-Agent Trust Exploitation (OWASP ASI09) Explained
OWASP ASI09 covers attacks that exploit human trust in agents. Approval fatigue turns HITL into theatre; risk-tiered approvals with evidence fix it.