How to Secure Claude Computer Use in Production
Secure Claude computer use with isolation, least privilege, domain controls, prompt-injection defenses, confirmations, monitoring, and repeatable tests.
Read articleAgentGuard Research
Security thinking for the agentic era.
Practical guidance, independent reviews, and clear explanations for teams building AI agents that can take real action.
How to Audit an MCP Server: A Practical Security Checklist
Audit an MCP server from inventory and identity through tool schemas, downstream authorization, prompt injection tests, logging, and retesting.
Read articleHow to Prevent Wallet Drains from AI Agents
Learn how to prevent Wallet Drains from AI Agents with bounded authority, practical controls, and repeatable security tests.
Read articleArbitrary Code Execution in AI Agents: Where the Boundary Breaks
AI agents turn code execution into a security boundary problem when untrusted input can influence commands under real credentials.
Read articleHow to Use ChatGPT Safely at Work: A Practical Checklist
Safe ChatGPT use starts with data classification, approved accounts, minimal inputs, source checking, and care with connected tools.
Read articleSecuring CLI AI Agents Without Killing Developer Flow
CLI agents need a narrow workspace, explicit command policy, isolated secrets, and tests that inspect actual filesystem and network effects.
Read articleModel Security Scanning: What to Test Before a Model Ships
Model security scanning combines artifact inspection with behavioral tests; neither one can cover the release alone.
Read articleUsing the OWASP Top 10 for LLM Applications in a Real Security Program
Use the OWASP LLM Top 10 as a risk index, then map each relevant item to a deployed path, control, and test.
Read articleAI Governance Best Practices That Hold Up in Production
Effective AI governance assigns owners and decisions to real systems, then checks whether controls still work after change.
Read articleAI Privacy: Trace the Data Before You Trust the Answer
AI privacy work starts with a traceable data flow: what enters, where it persists, who can retrieve it, and what leaves.
Read articleHow to Audit an AI System Without Turning It into a Paper Exercise
Audit an AI system by tracing its decisions, data, tools, and real effects rather than reviewing policy documents alone.
Read articleAI Risk Management That Reaches the Release Gate
A risk register becomes useful when every important risk maps to an owner, control, test, release decision, and recovery action.
Read article