AI Agent Security
Data Exfiltration Risks in Agentic AI
Agentic AI creates novel data exfiltration paths via over-broad tool access, chatty outputs, and prompt injection. Learn how to contain each risk layer.
Blog
Insights & updates — page 13
AI agent security, identity, governance, cost, and the engineering behind the control plane.
Identity & Access
Deploying SPIFFE/SPIRE for AI Agent Identity
How to plan a SPIFFE/SPIRE deployment for agent workloads: trust domains, attestation policy, federation, and the operational pitfalls that show up first.
Identity & Access
Enterprise IdPs and AI Agents: The Ping Identity Case
Ping Identity's enterprise IdP stack extends to agent authentication like its peers. What that coverage includes, and what runtime governance still owns.
AI Agent Security
Prompt Injection: Threats and Defenses
Prompt injection hides malicious instructions in content AI agents process. How direct and indirect variants work, and what defenses reduce the risk.
Identity & Access
Keycloak for AI Agent Identity: What You Must Build
Keycloak's realms, clients, and token exchange cover agent authentication cleanly. What agent delegation and per-tool scoping still require you to build.
Identity & Access
HashiCorp Vault for Agent Credentials: Patterns and Limits
Vault's dynamic secrets and leases fit agent credentials well. The patterns that work, and where lease-based secrets stop being enough for agent behavior.
AI Agent Security
Zero Trust for AI Agents
Zero trust for AI agents means verifying every identity, enforcing least-privilege policy at every hop, and using behavioral trust scores at runtime.
Identity & Access
Microsoft Entra Workload Identity for AI Agents
Entra's managed identities and federated credentials remove standing secrets for Azure workloads. What that covers for agents, and what Entra Agent ID adds.
Identity & Access
Secrets Vault vs Agent Governance: Where Each Stops
A centralized secrets vault removes scattered credentials from agent deployments. What it fixes for AI agents, and what it leaves for another layer.
AI Governance & Compliance
SOC 2 for AI Platforms: What Auditors Look For
SOC 2 auditors scrutinize AI platforms harder than traditional SaaS—learn which controls matter most, from tamper-evident audit trails to agent access.
Identity & Access
Britive Alternatives: Just-in-Time Access for Agents
Britive grants just-in-time privileged cloud access that expires automatically. Where that checkout model fits agents, and where it breaks down.
Identity & Access
Federating Agent Identity Across Multiple Clouds
Agents rarely stay in one cloud. How OIDC federation, SPIFFE trust-domain federation, and DIDs let agent identity cross cloud boundaries without shared secrets.
AI Governance & Compliance
GDPR for AI Systems: Data Subject Rights and Erasure
How GDPR data subject rights apply to AI pipelines, what Article 17 erasure requires technically, and the design patterns that make compliance tractable.
Identity & Access
Aembit Alternatives: Workload Identity for AI Agents
Aembit issues secretless credentials to workloads. Where that covers AI agents, and where delegation and tool scoping need another layer.
Platform & Operations
MCP Server Authentication: OAuth 2.1 vs API Keys
OAuth 2.1 vs API keys for MCP servers after the Nov 2025 spec: PKCE, RFC 8707 resource indicators, token lifetimes, revocation, and when each fits.
AI Governance & Compliance
The EU AI Act Explained for Engineering Teams
EU AI Act for engineers after the 2026 Digital Omnibus: Annex III high-risk rules move to Dec 2027, Art. 50 applies from Aug 2026, plus a readiness path.
AI Agent Security
Why AI Infrastructure Needs a New Security Model
Traditional IAM secures human users, not AI agents making thousands of calls per minute. Why a connection-centric model is the right foundation.
AI FinOps
The Unit Economics of Agentic Products
A framework for modeling unit economics in agentic products — cost per task as a variable formula, margin sensitivity, and the drivers that move it.
AI Governance & Compliance
How to Discover AI Agents: Methods Compared
How to discover the AI agents you run, compared: registration, repository scans, telemetry, access logs, consoles and surveys, and what each one misses.
AI FinOps
Reserved Capacity vs On-Demand LLM Spend
A decision framework for choosing reserved capacity versus on-demand LLM spend, based on workload predictability, volume confidence, and switching cost.
AI FinOps
A Procurement Checklist for Agentic AI Tools
A procurement checklist for evaluating agentic AI tools across cost structure, integration burden, governance fit, and organizational readiness.
AI Strategy
Guardrails vs Policies: Message Checks vs Traffic Rules
Guardrails check what is said; policies govern rate limits and time windows. How the two AI control layers differ, and why neither replaces the other.
AI FinOps
Negotiating LLM Provider Contracts
The commercial levers in an LLM provider contract — commitment structure, overage treatment, data-use terms, and portability — and how to evaluate each one.
AI FinOps
Costing AI Agent Downtime
A method for costing AI agent downtime as a formula across direct, cascading, and recovery terms, so availability investment can be sized rationally.