AI Strategy
Best AI Agent Governance Platforms (2026): How to Choose
Criteria for evaluating AI agent governance platforms, then a disclosed list of platforms as of October 2026, grouped by approach and what each is best for.
Blog
Insights & updates — page 8
AI agent security, identity, governance, cost, and the engineering behind the control plane.
AI Agent Security
Securing the AI Agent Supply Chain
Provenance, attestation, and runtime verification protect AI deployments from compromised third-party agents and tools — and how supply chain security works.
AI Governance & Compliance
ISO/IEC 42001 for AI Management Systems
ISO/IEC 42001 sets requirements for AI management systems. See what the standard expects and how agent governance controls map directly to its Annex A clauses.
AI Governance & Compliance
Agent Lifecycle Management: Draft to Production
Most agents reach production with no promotion gate. The lifecycle stages worth defining, what each gate should check, and how to keep promotion fast.
AI Governance & Compliance
An AI Agent Compliance Checklist for 2026
A practical AI agent compliance checklist covering identity, tamper-evident audit trails, GDPR erasure, EU AI Act risk tiers, and vendor due diligence.
AI Agent Security
Threat Model: Indirect Prompt Injection
Indirect prompt injection hijacks tool-using AI agents through poisoned external content. Learn the attack vectors and layered controls that contain them.
AI Governance & Compliance
Policy as Code: Versioning Guardrails and Agent Config
Guardrails and agent configuration are security controls and need their change discipline: version policy, review changes, prove which version was in force.
AI Governance & Compliance
Applying the NIST AI RMF to AI Agents
Apply the NIST AI RMF to AI agents: map GOVERN, MAP, MEASURE, and MANAGE to controls like agent inventories, threat models, audit trails, and revocation.
AI Agent Security
Insider Threat in the Age of AI Agents
Agents give insiders bulk access at machine speed and attribution that stops at a service identity. What changes for insider threat, and the controls that help.
Platform & Operations
Guardrail Nodes: Inline Policy in Agent Workflows
A guardrail node in a workflow graph makes policy visible where it applies. What these nodes should do, the silent no-op to avoid, and connection enforcement.
AI Governance & Compliance
An AI Governance Maturity Model
Five stages of AI governance maturity for agents, from ad-hoc to optimized, with concrete indicators and the specific work needed to advance each stage.
AI Agent Security
System Prompt Extraction: What Leaks and Why It Matters
System prompts leak. Treat them as public and the damage is bounded; treat them as secret and extraction becomes a breach. What attackers get, and how to plan.
AI Agent Security
Securing LLM Provider API Keys
A leaked LLM provider key can be billed against and can expose prompt traffic. How these keys leak, why per-agent keys are the wrong fix, and what a proxy buys.
AI Strategy
Measuring the ROI of AI Agents
Practical frameworks for quantifying AI agent ROI — cost per outcome, time recovered, and deflection rate — so you can move beyond vanity usage metrics.
Identity & Access
Threat Model: Agent Credential Theft
How AI agent credentials get stolen and abused, and the controls that limit blast radius: credential scoping, short lifetimes, rotation, and fast revocation.
AI Agent Security
Model Extraction and Inference Attacks Against Agents
Query access alone can extract model behavior, infer training data, and reconstruct context. Which of these threats are real for agents and what mitigates them.
Platform & Operations
Agent Task Marketplaces and Escrow
When agents post and accept paid work across organizations, payment becomes a security surface. The task lifecycle, where escrow protects each side, the leaks.
AI Governance & Compliance
Staged Guardrail Rollout and Shadow Mode
Blocking with an unmeasured guardrail is how teams end up disabling guardrails. The shadow-to-enforce progression and the metrics that justify each promotion.
Identity & Access
SSO and SCIM: Enterprise Identity for AI Tools
SSO and SCIM give enterprises full control over AI tool access — federated authentication plus automated lifecycle management that keeps access current.
Platform & Operations
Building Golden Datasets for Agent Evals
The dataset, not the harness, is the hard part of agent evals. How to source golden set cases, set expectations for non-deterministic agents, and version them.
AI Agent Security
Threat Model: Agent-to-Agent Delegation Abuse
When AI agents delegate tasks to each other, the delegation chain becomes an attack surface. How to threat-model and contain A2A delegation abuse.
Platform & Operations
Webhook Security: Signing and Verifying Events
HMAC signatures plus timestamp replay windows are the minimum bar for secure webhooks — here's why unsigned endpoints are dangerous and how to fix them.
Platform & Operations
OTLP Telemetry Ingest for Agent Discovery
You cannot govern agents you do not know about. OTLP telemetry ingest turns existing instrumentation into an agent inventory. What the ingest path has to solve.
AI FinOps
Token Usage Forecasting and Capacity Planning
Agent token usage is forecastable as volume times cost per task, not an extrapolated total. The decomposition, the non-linearities, and what to plan for.