Stop Dangerous AI Agent Commands Before They Run
A practical command-control pattern for coding agents with shell, filesystem, network, and credential access.
Read articleAgentGuard Research
Security thinking for the agentic era.
Practical guidance, independent reviews, and clear explanations for teams building AI agents that can take real action.
Securing AI Agents at Runtime: A Control-by-Control Guide
A deployment guide for putting enforceable controls between an agent's intent and its real-world side effects.
Read articleAI Agent Threat Modeling Guide: Model the Path to Action
Draw an AI agent threat model that connects attacker influence, trust boundaries, identities, controls, and observable asset changes.
Read articleAI DLP Guide: Control Sensitive Data Across Agent Workflows
Trace sensitive data from source and classification through model context, connectors, recipients, delivery, and safe audit records.
Read articleRAG 2.0 Security Guide: Protect the End-to-End System
Protect RAG 2.0 across retrieval, generation, feedback, identity, context assembly, and downstream agent actions.
Read articlePrompt Injection Prevention: A Control-to-Regression Standard
Pair each prompt-injection prevention control with an owner, adversarial case, target-state assertion, and recovery decision.
Read articleOWASP Agentic AI Top 10 Guide: Turn Risks into Tests
Translate all ten OWASP agentic AI risks into control surfaces, abuse cases, owners, tests, and retained evidence.
Read articleMCP Server Security Guide: Build, Deploy, and Verify Controls
Secure the complete MCP request path from client identity and transport through server policy, downstream effect, and audit evidence.
Read articleMCP Governance Guide: Controls for Servers, Tools, and Access
Govern MCP servers and tools from catalog admission through identity, change control, runtime evidence, exceptions, and retirement.
Read articleHow to Secure a Cursor AI Agent Workflow
Make Cursor workspace scope, context exposure, extensions, terminal actions, and branch outcomes separately reviewable.
Read articleHow to Secure Claude Code Tools
Constrain Claude Code workspace access, connected tools, credentials, commands, and repository changes with reproducible checks.
Read articleHow to Test AI Agents for Prompt Injection
Build prompt-injection tests that follow hostile input through tool decisions and verify the downstream target stays unchanged.
Read article