Every AI Agent Needs Its Own Identity, Not a Borrowed One
AI agent identity is where good intentions most often meet shortcuts. A developer needs an agent to reach a database,...
What Market Conduct Examiners Are Starting to Ask About Claims and Underwriting AI Agents
Agentic AI for life insurance has moved out of the innovation lab and into the decisions regulators already watch...
Least Privilege Isn't Enough for Hospitality AI Agents. You Need Least Agency.
Least privilege has been a core security principle, and it applies to every hospitality AI agent just as it applies...
Why Soft Guardrails Get Hotels Hacked: The Case for Hard Boundaries on Agentic Bookings
Agentic AI for hospitality has moved well past the concierge chat window. AI booking and concierge agents now confirm...
The Real Risk to AI Agents for Hospitality Isn't Data Loss, It's Unauthorized Free-Night Awards
AI agents for hospitality can now confirm a free-night award in seconds. Picture a guest who, after a canceled...
You Need Least Agency: Least Privilege Isn't Enough for Airline AI Agents
Least privilege has been a core security principle for decades, and it applies to every AI airline agent just as...
Why Soft Guardrails Get Airlines Hacked: The Case for Hard Boundaries on Agentic Rebooking
The airline chatbot is no longer just answering questions. Agentic AI in the airline industry has crossed a line...
The Real Risk to Airline AI Agents Isn't Data Loss, It's Unauthorized Refunds
Agentic AI in the airline industry has moved from pilot to production, and airline AI agents can now issue a refund...
Your Voice AI Agent Takes Calls From Strangers. Who’s Checking?
Last week, US prosecutors indicted three people who allegedly used AI to impersonate both a CEO and a law-firm...
You Can’t Secure the Homegrown AI Agents You Don’t Know You Have
Ask a security team how many homegrown AI agents the organization runs, and the room usually goes quiet. Engineering...
Resilience by Design: Architecting Agentic Systems to Fail Safely, Not Catastrophically
Agentic AI fails differently than traditional software. When a service crashes, alerts trigger, processes restart,...
Introducing HAMMER, the Homegrown Agent Maturity Model for Execution & Risk
The Homegrown Agent Maturity Model for Execution & Risk (HAMMER): is a five-level framework with seven domains...
The First Questions That Matter: Triaging AI Agent Security Incidents
I have lived through major incidents firsthand, including the urgent calls that come in the middle of the night....
Building the Business Case for Agentic AI Security Across EMEA
Agentic AI security is a new budget line for most organizations, which means security buyers across EMEA often...
The First Questions That Matter: Governing an AI Agent Incident
I’ve been on enough middle-of-the-night incident calls to know what separates the organizations that recover quickly...
Stop Waiting for the Alert: Enforcing AI Agent Behavior with Zenity Boundaries
Every security team I talk to has some version of the same document. It might be called an “AI Acceptable Use Policy”...
Shadow AI: When Approved Experiments Create New Shadows
An AI innovation team is asked to build a customer support assistant in two weeks. The demo works, employees start...
Building the Business Case for Agentic AI Security Investment
Security investment decisions are always, at some level, conversations about risk quantification: how much exposure...
Architecting Trust: The Data Pipelines and Infrastructure Behind The Guardian Agents
As AI agents operate with increasing autonomy in enterprise production, the sheer volume of security telemetry...
When Agents Trust Each Other, One Compromised MCP Server Is Enough
The agentic AI security conversation has, for good reason, spent most of its energy on the agents an organization...
Five Ways AI Agents Actually Fail, and Why Most Security Programs Are Only Built for Two of Them
Most of the industry discourse on agentic AI risk has settled into a comfortable framing: agents get attacked the...
The Authorization Trap: Why "No Evidence of Manipulation" Doesn't Mean "No Incident"
Many conversations about AI agent risk over the past year start from the same unspoken assumption: something bad...
MCP Is Growing Up
Our team spends much of the week talking to security leaders and practitioners who are trying to figure out where...
The Agent Will See You Now: Why Healthcare's AI Agent Boom Needs Visibility and Control
Healthcare, as an industry vertical, is moving faster on agentic AI than it has in past technology evolutions....
Secure Your Agents
We’d love to chat with you about how your team can secure and govern AI Agents everywhere.
Get a Demo