AI Agent Security Policy Design: Deny, Allow, and Step-Up Decisions in Practice
Answer the question of which of the following is a key principle for AI agent security, then design deny, allow, and step-up policie...
Read insightCodeCrux / Field notes
141 insights / and countingAI engineering
in the real world.
Practical thinking on the systems, controls and trade-offs that make AI useful in production.
01Read
what we
are building.
what we
are building.
AIML
Securing Agent-to-Agent Delegation: Mutual Authentication and Scoped Capability Tokens for Multi-Agent Systems
Map the AI agent security architecture attack surface and defense layers, then implement mutual authentication and scoped capability tokens for safe agent-to-agent delegation.
Read the latest insight
AI Agent Security Reports and News: Separate Real Incidents from Marketing Claims
A comprehensive tutorial covering ai agent security reports and news: separate real incidents from marketing claims. Practical examp...
Read insight
AI Agent Security for Developers: Build a Secure MCP and API Integration Layer
Learn how to secure AI agents with a governed gateway: map the attack surface, enforce least privilege, and add approval checkpoints...
Read insight
AI Agent Security Certification and Skills Guide for Security Engineers
Learn how to earn and demonstrate AI agent security competence as a security engineer — attack surfaces, practical controls, labs, a...
Read insight
AI Agent Security Research and GitHub Projects: A Practical Learning Path
A hands-on guide to AI agent security research papers, GitHub projects, and controls that map the agent attack surface and build a g...
Read insight
AI Agent Security Incident Response: Investigate Unauthorized Tool Actions
Learn how to detect, investigate, and respond to an AI agent security incident, with practical controls, audit evidence, and step-by...
Read insight
AI Agent Security Vendors and Tools: How to Evaluate the Enterprise Market Map
Learn how to evaluate AI agent security vendors with a practical framework that maps the agent attack surface, enforces least privil...
Read insight
Microsoft AI Agent Security: Design Access Policies for Enterprise Copilots and Agents
Learn a practical framework for Microsoft AI agent security: least-privilege access policies, delegated identity, and human approval...
Read insight
AWS AI Agent Security: Protect Credentials, Tools, and Enterprise Workloads
A hands-on guide to aws ai agent security covering agent identity, scoped tool access, credential gating, approval checkpoints, and ...
Read insight
Auth0 and AI Agent Security: Compare Identity Patterns for Delegated Actions
Compare identity patterns for AI agents and see what's different about Auth0's approach to AI agent security, from delegated tokens ...
Read insight
Google's Approach to AI Agent Security: Identity, Permissions, and Runtime Boundaries
An introduction to Google's approach to AI agent security: how identity, delegated permissions, and runtime boundaries contain agent...
Read insight
AI Agent Frameworks and Platforms in 2026: How to Choose for Production
Compare 20 AI agent frameworks and cloud platforms for production systems. Learn when to choose AgentCore, Google ADK, Foundry, Lang...
Read insight
NIST AI Agent Security: Build a Risk Management and Evidence Plan
Learn how to apply NIST-aligned controls to reduce risk across AI agent identities, tools, and execution paths while building an aud...
Read insight
OWASP AI Agent Security Guide: Translate Agentic Threats into Engineering Controls
Learn how to translate agentic threats into actionable engineering controls with a practical framework for securing AI agent identit...
Read insight
AI Agent Security Governance for Regulated Industries: Policies, Evidence, and Approval
How are regulated industries handling ai agent security? Build policy boundaries, approval gates, and audit evidence for enterprise ...
Read insight
AI Agent Security Audits: A Step-by-Step Assessment Checklist for Production
Learn how to run an AI agent security audit on production agents, testing identity, tool permissions, prompt injection, and fail-clo...
Read insight
AI Agent Security Monitoring: Trace Identity, Policy Decisions, and Tool Outcomes
Learn how to trace agent identity, policy decisions, and tool outcomes in AI agent security monitoring, so every action is attributa...
Read insight
How to Test AI Agent Security: Red Teams, Tool Abuse, and Regression Suites
A hands-on guide to ai agent security testing: map the attack surface, abuse tools in a sandbox, and lock in results with regression...
Read insightHave a production AI problem?
Bring us the hard part.
Talk to an AI architect about the workflow, the constraints and the path from prototype to production.