AI Agent Security
AI Agent Memory Poisoning: Attacks and Defenses (ASI06)
Memory poisoning implants malicious content in an AI agent's persistent state. How ASI06 attacks persist across sessions and the defenses that work.
Blog
Insights & updates — page 8
AI agent security, identity, governance, cost, and the engineering behind the control plane.
Platform & Operations
MCP Server Registries: Publishing, Discovery, and Ratings
An MCP server registry is a supply-chain control point. What a registry entry should carry, how ratings get gamed, and why internal catalogues beat public ones.
AI Agent Security
AI Agent Supply Chain Security (OWASP ASI04)
The AI agent supply chain — models, MCP servers, tools, prompts, frameworks — and the vetting, pinning, and attestation controls against ASI04.
Identity & Access
Secure Agent Offboarding and Deprovisioning
Retired agents keep credentials, connections, and scheduled triggers. The agent offboarding and deprovisioning sequence that actually closes them.
AI Agent Security
Securing Inter-Agent Communication and A2A (ASI07)
Agent-to-agent channels are an attack surface: spoofed peers, injected payloads, unbounded delegation. Securing A2A against OWASP ASI07.
AI Agent Security
Trust Scores vs Allow-Lists for Agent Authorization
Static allow-lists gate identity; dynamic trust scores gate scope. Learn how each works, where each falls short, and why mature programs combine both.
AI Agent Security
Cascading Failures in Multi-Agent Systems (ASI08)
How one agent's error propagates through orchestrated systems — amplification, feedback loops, resource storms — and the ASI08 containment controls.
AI Agent Security
Rogue AI Agents and Kill Switches (OWASP ASI10)
Rogue agents run with valid credentials outside governance. The kill-switch architecture — containment tiers, revocation, drills — for OWASP ASI10.
Platform & Operations
Detecting Shadow MCP Servers
Developers add MCP servers to agents in minutes, without review. How to detect shadow MCP servers already running and make the governed path the easier one.
AI Governance & Compliance
Guardrails vs Evals vs Monitoring: Which Control When
Guardrails, evals and monitoring each close a different AI safety gap at a different lifecycle stage. Which one to use when, and why you need all three.
Identity & Access
Machine vs Workload vs Agent Identity: The Differences
Machine identity, workload identity, and agent identity are not synonyms. What each term means, where they overlap, and what agents add.
Identity & Access
NHI Credential Lifecycle Management: A Practical Guide
Non-human identity credentials from issuance to revocation: provisioning, scoping, rotation, monitoring, and decommissioning without sprawl.
Platform & Operations
Publishing Agents to a Marketplace: The Review Gate
A marketplace where publishers approve their own listings has no review at all. The listing lifecycle, why self-certification must be impossible, what to check.
Platform & Operations
MCP OAuth 2.1 and PKCE, Explained Step by Step
The MCP 2026 authorization flow: discover metadata, choose CIMD or registered clients, use PKCE, validate the issuer, and request resource-bound tokens.
Platform & Operations
MCP Server Vetting: Registry Risk and How to Manage It
Third-party MCP servers are supply-chain risk: registry provenance, tool-description audits, version pinning, and an approval workflow that scales.
AI FinOps
Model Routing: Cost and Quality Trade-offs
Sending every request to your best model is the costliest way to run an agent. Model routing strategies that hold quality, ones that cost more, and governance.
AI Agent Security
A2A vs MCP: What's the Difference?
MCP connects agents to tools; A2A connects agents to each other. Understand how both protocols divide labor and what security controls each one demands.
AI Agent Security
How to Detect Prompt Injection: Signals That Work
A detection-focused how-to for prompt injection: pattern rules, ML classifiers, LLM judges, and behavioral signals — and where to place each one.
Platform & Operations
MCP Gateway Comparison 2026: Options and Trade-offs
MCP gateway options compared as of October 2026: open-source gateways, API-gateway extensions and governance control planes, and what to look for.
AI Strategy
Zenity Alternatives for AI Agent Security in 2026
Evaluating alternatives to Zenity for AI agent security: what Zenity focuses on, why teams shop the category, and a factual survey of options.
AI Strategy
Lakera Alternatives for LLM Guardrails in 2026
Evaluating alternatives to Lakera for LLM guardrails: what Lakera focuses on, when teams need more than a content API, and the options.
AI Strategy
Prompt Security Alternatives in 2026
Evaluating alternatives to Prompt Security after the SentinelOne acquisition: what it covers, why buyers re-shop the category, and the options.
AI Strategy
An AI Governance Platform RFP Checklist
A ready-to-use RFP checklist for evaluating AI governance platforms: identity, policy enforcement, guardrails, spend controls, audit, and compliance.
Identity & Access
Astrix Security Alternatives for NHI Governance in 2026
Evaluating alternatives to Astrix Security for non-human identity governance — and when agent-native identity needs a different layer.