AI Agent Security
Insider Threat in the Age of AI Agents
Agents give insiders bulk access at machine speed and attribution that stops at a service identity. What changes for insider threat, and the controls that help.
Blog
Insights & updates — page 10
AI agent security, identity, governance, cost, and the engineering behind the control plane.
Platform & Operations
Guardrail Nodes: Inline Policy in Agent Workflows
A guardrail node in a workflow graph makes policy visible where it applies. What these nodes should do, the silent no-op to avoid, and connection enforcement.
AI Governance & Compliance
An AI Governance Maturity Model
Five stages of AI governance maturity for agents, from ad-hoc to optimized, with concrete indicators and the specific work needed to advance each stage.
AI Agent Security
System Prompt Extraction: What Leaks and Why It Matters
System prompts leak. Treat them as public and the damage is bounded; treat them as secret and extraction becomes a breach. What attackers get, and how to plan.
AI Agent Security
Securing LLM Provider API Keys
A leaked LLM provider key can be billed against and can expose prompt traffic. How these keys leak, why per-agent keys are the wrong fix, and what a proxy buys.
AI Strategy
Measuring the ROI of AI Agents
Practical frameworks for quantifying AI agent ROI — cost per outcome, time recovered, and deflection rate — so you can move beyond vanity usage metrics.
Identity & Access
Threat Model: Agent Credential Theft
How AI agent credentials get stolen and abused, and the controls that limit blast radius: credential scoping, short lifetimes, rotation, and fast revocation.
AI Agent Security
Model Extraction and Inference Attacks Against Agents
Query access alone can extract model behavior, infer training data, and reconstruct context. Which of these threats are real for agents and what mitigates them.
Platform & Operations
Agent Task Marketplaces and Escrow
When agents post and accept paid work across organizations, payment becomes a security surface. The task lifecycle, where escrow protects each side, the leaks.
AI Governance & Compliance
Staged Guardrail Rollout and Shadow Mode
Blocking with an unmeasured guardrail is how teams end up disabling guardrails. The shadow-to-enforce progression and the metrics that justify each promotion.
Identity & Access
SSO and SCIM: Enterprise Identity for AI Tools
SSO and SCIM give enterprises full control over AI tool access — federated authentication plus automated lifecycle management that keeps access current.
Platform & Operations
Building Golden Datasets for Agent Evals
The dataset, not the harness, is the hard part of agent evals. How to source golden set cases, set expectations for non-deterministic agents, and version them.
AI Agent Security
Threat Model: Agent-to-Agent Delegation Abuse
When AI agents delegate tasks to each other, the delegation chain becomes an attack surface. How to threat-model and contain A2A delegation abuse.
Platform & Operations
Webhook Security: Signing and Verifying Events
HMAC signatures plus timestamp replay windows are the minimum bar for secure webhooks — here's why unsigned endpoints are dangerous and how to fix them.
Platform & Operations
OTLP Telemetry Ingest for Agent Discovery
You cannot govern agents you do not know about. OTLP telemetry ingest turns existing instrumentation into an agent inventory. What the ingest path has to solve.
AI FinOps
Token Usage Forecasting and Capacity Planning
Agent token usage is forecastable as volume times cost per task, not an extrapolated total. The decomposition, the non-linearities, and what to plan for.
Platform & Operations
Versioning and Rollback for AI Agents
Version AI agent workflows like code, diff changes between snapshots, and roll back safely when a new version causes regressions or runaway costs in production.
AI FinOps
Prompt Caching: Cutting Agent Inference Cost
Agent loops resend the same context every step, which is what prompt caching is for. How to structure prompts for cache hits, what breaks them, and the risks.
Platform & Operations
Dead-Letter Queues for Failed Agent Jobs
A dead-letter queue nobody watches is where work gets forgotten. What belongs in a DLQ, how to alert on it, and how to replay safely once the cause is fixed.
AI Agent Security
Incident Response for AI Agent Breaches
A practical incident response runbook for AI agent breaches: contain damage, revoke credentials, investigate with tamper-evident audit trails, and recover.
Platform & Operations
Threat Model: Over-Broad MCP Tool Scope
Over-broad MCP tool permissions give attackers an amplified attack surface. Learn the failure modes and control classes that shrink the blast radius.
AI Governance & Compliance
Maker-Checker for Platform Administration
An admin action one person can both request and approve is not controlled. Where maker-checker belongs in an AI platform and how self-approval sneaks back in.
Platform & Operations
Benchmarking Agents: What Public Numbers Can and Can't Show
Public agent benchmarks help narrow a shortlist but mislead as a selection criterion. What they measure, how contamination distorts them, how to test your own.
AI Governance & Compliance
PII Detection and Redaction in AI Pipelines
Detect and redact PII before it reaches AI models or persists in logs — covering entry points, detection techniques, redaction strategies, and compliance.