AI Agent Security
MITRE ATLAS vs OWASP Agentic AI Top 10: Different Jobs
MITRE ATLAS and the OWASP Agentic AI Top 10 answer different questions. Here is which framework to reach for, and when a team needs both.
AI Agent Security
AI Agent Security
Identity, authorization, guardrails, and trust for autonomous AI agents.
Start here
AI Agent Security: The Definitive Guide
A comprehensive guide to securing AI agents: identity, authorization, guardrails, trust scoring, A2A communication, audit logging, and incident response.
Read the guide →
AI Agent Security
The Mexico Government AI Breach: A Defender's Postmortem
A single operator used Claude Code and GPT-4.1 to breach nine Mexican government agencies. What the incident shows defenders about agent-assisted offense.
AI Agent Security
ServiceNow Now Assist Agent Discovery Incident
How second-order prompt injection abused ServiceNow Now Assist's agent-to-agent discovery feature, and what it shows about multi-agent privilege design.
AI Agent Security
The Lethal Trifecta: A Framework for Agent Data Exfiltration
The lethal trifecta names the three properties that make prompt injection dangerous: private data, untrusted content, and external communication.
AI Agent Security
ForcedLeak and PipeLeak: Agentforce Breaches Explained
Two 2025-2026 prompt-injection disclosures in Salesforce Agentforce, ForcedLeak and PipeLeak, show how form data becomes a data-exfiltration path.
AI Agent Security
Agent Sandbox Escape: Containing Code Execution
Giving an agent a code interpreter means running attacker-influenceable code in your infrastructure. Learn the escape paths that matter and how to build a sandbox that fails safely.
AI Agent Security
Insecure Output Handling: When Agent Output Becomes an Injection Vector
Model output is untrusted input to whatever consumes it. Learn how agent output causes XSS, SQL injection, command execution, and log poisoning downstream — and how to bound it.
AI Agent Security
Are Agent Skills Safe? A SKILL.md Security Checklist
Agent Skills bundle scripts an agent executes at high trust, and the script's own output — not its source — is what the model ever sees. Vet before enabling.
AI Agent Security
Securing AI Agents in CI/CD Pipelines
An agent in your pipeline runs with deploy credentials and reads attacker-submittable content. Learn why pull-request-triggered agents are the sharpest case and how to constrain them.
AI Agent Security
WitnessAI Alternatives for Runtime AI Access Control
Evaluating alternatives to WitnessAI for runtime AI access control and compliance — what the category covers and how peers compare.
AI Agent Security
Voice Agent Security Risks
Voice agents add a biometric identity channel that can be synthesized, an audio input channel that carries injection, and a real-time path with no room for review. Here is what changes.
AI Agent Security
Noma Security Alternatives for Agentic AI Security
Evaluating alternatives to Noma Security for agentic AI security — red-teaming, agent containment, and where platform-bundled options fit.
AI Agent Security
Securing AI Coding Agents
AI coding agents read files, run tools, and push code autonomously. Learn the real risks — prompt injection, secret leakage — and how to contain them.
AI Agent Security
Securing Browser-Use Agents
A browser-driving agent reads the open web and holds your session cookies. That combination is the highest-risk agent deployment shape in common use. Here is how to constrain it.
AI Agent Security
AI Agent Security for Startups
A pragmatic guide to AI agent security for startups: the controls that matter most when you are moving fast and have limited security resources.
AI Agent Security
The Confused Deputy Problem in AI Agents
AI agents are deputies acting on behalf of principals. When an attacker confuses which principal an agent is serving, its permissions become the attacker's. Here is how to structure authority so that cannot happen.
AI Agent Security
Multi-Turn Jailbreaks: Why Per-Message Filtering Fails
Crescendo and other multi-turn attacks distribute the payload across turns so no single message looks malicious. Learn why stateless filtering misses them and what session-level controls catch them.
AI Agent Security
Excessive Agency: Controls for OWASP LLM06
Excessive agency is what turns a model mistake into an incident. Learn the three components — excessive functionality, permissions, and autonomy — and the controls that constrain each.
AI Agent Security
Red Teaming AI Agents: A Practical Playbook
Red teaming an agent is not prompt-hacking a chatbot. The objective is unauthorized action, not embarrassing text. Here is a scope, a technique set, and a scoring model that produces useful findings.
AI Agent Security
RAG Pipeline Security: Vector Store Poisoning
A retrieval pipeline is a code path that pulls attacker-influenced content into a model's context. Learn how vector stores get poisoned, how retrieval leaks across tenants, and which controls hold.
AI Agent Security
AI Agent Runtime Security: The Complete Overview
What AI agent runtime security means: in-band enforcement of identity, authorization, guardrails, resource caps, and kill switches while agents execute.
AI Agent Security
Continuous Adversarial Testing for AI Agents
How Praesidia continuously red-teams its own registered agents and MCP servers: opt-in, scope-guarded, synthetic payloads, no external egress.
AI Agent Security
Goal Hijacking in AI Agents (OWASP ASI01)
Goal hijacking redirects an AI agent's objective while it runs normally. How ASI01 attacks work and the controls that contain a hijacked goal.
AI Agent Security
AI Agent Memory Poisoning: Attacks and Defenses (ASI06)
Memory poisoning implants malicious content in an AI agent's persistent state. How ASI06 attacks persist across sessions and the defenses that work.
AI Agent Security
AI Agent Supply Chain Security (OWASP ASI04)
The AI agent supply chain — models, MCP servers, tools, prompts, frameworks — and the vetting, pinning, and attestation controls against ASI04.
AI Agent Security
Securing Inter-Agent Communication and A2A (ASI07)
Agent-to-agent channels are an attack surface: spoofed peers, injected payloads, unbounded delegation. Securing A2A against OWASP ASI07.
AI Agent Security
Trust Scores vs Allow-Lists for Agent Authorization
Static allow-lists gate identity; dynamic trust scores gate scope. Learn how each works, where each falls short, and why mature programs combine both.
AI Agent Security
Cascading Failures in Multi-Agent Systems (ASI08)
How one agent's error propagates through orchestrated systems — amplification, feedback loops, resource storms — and the ASI08 containment controls.
AI Agent Security
Rogue AI Agents and Kill Switches (OWASP ASI10)
Rogue agents run with valid credentials outside governance. The kill-switch architecture — containment tiers, revocation, drills — for OWASP ASI10.
AI Agent Security
A2A vs MCP: What's the Difference?
MCP connects agents to tools; A2A connects agents to each other. Understand how both protocols divide labor and what security controls each one demands.
AI Agent Security
How to Detect Prompt Injection: Signals That Work
A detection-focused how-to for prompt injection: pattern rules, ML classifiers, LLM judges, and behavioral signals — and where to place each one.
AI Agent Security
The OWASP LLM Top 10, Applied to AI Agents
How each OWASP LLM Top 10 risk category maps to agentic AI deployments — and the governance controls that address them at the infrastructure layer.
AI Agent Security
AI Agent Runtime Security vs AI Security Posture Management
Runtime security enforces per action, in-band; posture management assesses configurations out-of-band. What each catches and why you need both.
AI Agent Security
SSRF Risks in Agent Tool Calls
Any agent with a fetch tool is a server-side request forgery primitive with a natural-language interface. Learn the attack paths, why allow-lists beat denylists, and how to bound egress.
AI Agent Security
An AI Agent Incident Readiness Checklist
A practical checklist for AI agent incident readiness: inventory, instant revocation, tamper-evident audit trails, runbooks, and communication templates.
AI Agent Security
Securing the AI Agent Supply Chain
Provenance, attestation, and runtime verification protect AI deployments from compromised third-party agents and tools — and how supply chain security works.
AI Agent Security
Threat Model: Indirect Prompt Injection
Indirect prompt injection hijacks tool-using AI agents through poisoned external content. Learn the attack vectors and layered controls that contain them.
AI Agent Security
Insider Threat in the Age of AI Agents
Agents give insiders leverage: bulk access at machine speed, plausible deniability, and attribution that stops at a service identity. Learn what changes and which controls close the gap.
AI Agent Security
System Prompt Extraction: What Leaks and Why It Matters
System prompts leak. Treat them as public and the damage is bounded; treat them as secret and extraction becomes a breach. Here is what attackers get and how to structure prompts so it does not matter.
AI Agent Security
Securing LLM Provider API Keys
A leaked LLM provider key is a metered credential an attacker can bill against and a path to your prompt traffic. Learn how these keys leak, why per-agent keys are the wrong fix, and what proxying buys you.
AI Agent Security
Model Extraction and Inference Attacks Against Agents
Attackers can extract behavior, infer training data membership, and reconstruct sensitive context through query access alone. Learn which of these threats are real for agent deployments and what mitigates them.
AI Agent Security
Threat Model: Agent-to-Agent Delegation Abuse
When AI agents delegate tasks to each other, the delegation chain becomes an attack surface. How to threat-model and contain A2A delegation abuse.
AI Agent Security
Incident Response for AI Agent Breaches
A practical incident response runbook for AI agent breaches: contain damage, revoke credentials, investigate with tamper-evident audit trails, and recover.
AI Agent Security
Federated AI: Sharing Agents Without Sharing Data
How signed trust manifests and scoped admission controls let organizations share AI agents across boundaries without exposing data or credentials.
AI Agent Security
Trust Scoring Models for Autonomous Agents
How agent trust scoring models aggregate identity, behavior, and attestation signals into a runtime gate that controls what autonomous agents can do.
AI Agent Security
Tool-Use Safety: Sandboxing Agent Actions
Contain what AI agent tools can do: tool-level scoping, allow-lists, dry-runs, and human approval gates for high-consequence irreversible actions.
AI Agent Security
Secrets Management for AI Agents
Keep API keys and credentials out of agent prompts and source code. The four pillars of secrets management: storage, delivery, access control, and rotation.
AI Agent Security
Agent-to-Agent Protocols and Interoperability
How to design safe A2A interoperability: agent cards, secure discovery, scoped credentials, and cross-org trust — in under 8 minutes.
AI Agent Security
Data Exfiltration Risks in Agentic AI
Agentic AI creates novel data exfiltration paths via over-broad tool access, chatty outputs, and prompt injection. Learn how to contain each risk layer.
AI Agent Security
Prompt Injection: Threats and Defenses
Prompt injection hides malicious instructions in content AI agents process. How direct and indirect variants work, and what defenses reduce the risk.
AI Agent Security
Zero Trust for AI Agents
Zero trust for AI agents means verifying every identity, enforcing least-privilege policy at every hop, and using behavioral trust scores at runtime.
AI Agent Security
Why AI Infrastructure Needs a New Security Model
Traditional IAM secures human users, not AI agents making thousands of calls per minute. Why a connection-centric model is the right foundation.
AI Agent Security
AI Agent Security: The Complete Guide
The complete guide to AI agent security: identity, authorization, connection policies, content guardrails, monitoring, and incident response in one place.
AI Agent Security
The Rise of Shadow AI: Why Governance Matters
Shadow AI grows faster than shadow IT. The three risk categories it creates and how a governance framework closes the visibility gap before incidents occur.
AI Agent Security
AI Agent Identity: Why Agents Need Their Own Credentials
Agents running on borrowed human credentials create accountability gaps and excess privilege. Learn why agent-native identity changes the security calculus.
AI Agent Security
Inside the Agent Management Console
Register, configure, version, and debug every AI agent in your fleet from a single governed control surface with full audit trails and per-agent access control.
AI Agent Security
Agent-to-Agent (A2A) Communication, Governed
Governed A2A communication makes every inter-agent call authenticated, scoped, and audited — with agent cards, least-privilege identity, and guardrails.
AI Agent Security
Governed Connections Between Agents and Resources
Turn implicit agent-to-resource links into policy-bound connections with rate limits, spend caps, trust gates, and guardrails enforced at dispatch.
AI Agent Security
Securely Sharing AI Agents Across Organizations
Share AI agents with partner organizations under explicit policies — request caps, expiry, instant revocation — without handing over credentials.
AI Agent Security
Cross-Org Agent Federation with Trust Manifests
How signed trust manifests let organizations share AI agents across boundaries without shared secrets—each delegation explicit, verifiable, and revocable.
AI Agent Security
Trust Scores and Attestations: Deciding Which Agents to Trust
Learn how agent trust scores combine behavioral signals, compliance state, and cryptographic attestations into an auditable dispatch gate for AI agents.