Arbitrary Code Execution in AI Agents: Where the Boundary Breaks
AI agents turn code execution into a security boundary problem when untrusted input can influence commands under real credentials.
Read articleAgentGuard Research
Security thinking for the agentic era.
Practical guidance, independent reviews, and clear explanations for teams building AI agents that can take real action.
How to Use ChatGPT Safely at Work: A Practical Checklist
Safe ChatGPT use starts with data classification, approved accounts, minimal inputs, source checking, and care with connected tools.
Read articleSecuring CLI AI Agents Without Killing Developer Flow
CLI agents need a narrow workspace, explicit command policy, isolated secrets, and tests that inspect actual filesystem and network effects.
Read articleModel Security Scanning: What to Test Before a Model Ships
Model security scanning combines artifact inspection with behavioral tests; neither one can cover the release alone.
Read articleUsing the OWASP Top 10 for LLM Applications in a Real Security Program
Use the OWASP LLM Top 10 as a risk index, then map each relevant item to a deployed path, control, and test.
Read articleAI Governance Best Practices That Hold Up in Production
Effective AI governance assigns owners and decisions to real systems, then checks whether controls still work after change.
Read articleAI Privacy: Trace the Data Before You Trust the Answer
AI privacy work starts with a traceable data flow: what enters, where it persists, who can retrieve it, and what leaves.
Read articleHow to Audit an AI System Without Turning It into a Paper Exercise
Audit an AI system by tracing its decisions, data, tools, and real effects rather than reviewing policy documents alone.
Read articleAI Risk Management That Reaches the Release Gate
A risk register becomes useful when every important risk maps to an owner, control, test, release decision, and recovery action.
Read articleStop Dangerous AI Agent Commands Before They Run
A practical command-control pattern for coding agents with shell, filesystem, network, and credential access.
Read articleSecuring AI Agents at Runtime: A Control-by-Control Guide
A deployment guide for putting enforceable controls between an agent's intent and its real-world side effects.
Read articleAI Agent Threat Modeling Guide: Model the Path to Action
Draw an AI agent threat model that connects attacker influence, trust boundaries, identities, controls, and observable asset changes.
Read article