https://clawmont.com/blog/ Technical articles on AI agent security, prompt injection defense, MCP tool-call safety, and runtime defense for autonomous agents - from the team behind Clawmont. en https://clawmont.com/blog/ai-security-posture-management-runtime-gap/ https://clawmont.com/blog/ai-security-posture-management-runtime-gap/ AI security posture management explained: agent and tool inventory, credential mapping, configuration baselines, posture drift detection, and the runtime gap that posture scans cannot see. Thu, 16 Jul 2026 00:00:00 GMT AI Agent Security Posture Management Runtime Security https://clawmont.com/blog/ai-runtime-security-guardrails-sandboxes-gateways/ https://clawmont.com/blog/ai-runtime-security-guardrails-sandboxes-gateways/ Three control families claim the "AI runtime security" label. What inline guardrails, OS sandboxes, and gateways each catch, what each is structurally blind to, and how to combine them. Thu, 16 Jul 2026 00:00:00 GMT Runtime Security AI Agent Security Security Tools https://clawmont.com/blog/prompt-injection-detection-methods/ https://clawmont.com/blog/prompt-injection-detection-methods/ Prompt injection detection methods compared: deterministic pattern checks, ML classifiers, and LLM judges - the recall, false-positive, and cost trade each makes, and how to evaluate a detector honestly. Thu, 16 Jul 2026 00:00:00 GMT Prompt Injection AI Agent Security Runtime Security https://clawmont.com/blog/claude-code-security-hardening-guide/ https://clawmont.com/blog/claude-code-security-hardening-guide/ Six controls that harden Claude Code and other local coding agents: untrusted-input discipline, least privilege, config-write protection, credential scoping, egress limits, and audit evidence. Thu, 16 Jul 2026 00:00:00 GMT Claude Code Security AI Agent Security Runtime Security https://clawmont.com/blog/ai-agent-security-monitoring-audit-logging/ https://clawmont.com/blog/ai-agent-security-monitoring-audit-logging/ What an AI agent audit log should actually capture — prompts, tool calls, results, policy decisions — how to keep it tamper-evident, and how to reconstruct an incident from the evidence after something goes wrong. Tue, 07 Jul 2026 00:00:00 GMT AI Agent Security Monitoring Audit Logging https://clawmont.com/blog/ai-agent-data-exfiltration-runtime-defense/ https://clawmont.com/blog/ai-agent-data-exfiltration-runtime-defense/ How agents leak data: an attacker plants instructions in content the agent reads, the agent retrieves something sensitive, then sends it out through a legitimate tool. What each defense layer can and cannot see along that path. Tue, 07 Jul 2026 00:00:00 GMT AI Agent Security Data Exfiltration Prompt Injection https://clawmont.com/blog/ai-agent-memory-poisoning-runtime-defense/ https://clawmont.com/blog/ai-agent-memory-poisoning-runtime-defense/ Poisoned memory persists: instructions planted in an agent's stored context re-enter every later session. Why retrieval is the choke point, and the provenance, audit, and rollback controls that limit the damage. Tue, 07 Jul 2026 00:00:00 GMT AI Agent Security Memory Poisoning Agentic Security https://clawmont.com/blog/agentic-ransomware-ai-agent-security/ https://clawmont.com/blog/agentic-ransomware-ai-agent-security/ JADEPUFFER and clean-repo coding-agent exploits show why AI agent security needs runtime action checks, credential boundaries, egress controls, and audit evidence. Mon, 06 Jul 2026 00:00:00 GMT Agentic Security AI Agent Security Runtime Security https://clawmont.com/blog/nsa-mcp-security-guidance-ai-agents/ https://clawmont.com/blog/nsa-mcp-security-guidance-ai-agents/ NSA, CSA, IETF, and official MCP guidance translated into runtime controls for AI agents: trust boundaries, identity, tool validation, execution checks, and audit evidence. Mon, 06 Jul 2026 00:00:00 GMT MCP Security Security Guidance AI Agent Security https://clawmont.com/blog/ai-agent-runtime-security-checklist/ https://clawmont.com/blog/ai-agent-runtime-security-checklist/ A practical checklist for securing AI agents at runtime: inventory tools, scope credentials, inspect inputs, check tool dispatch, screen tool results, verify outputs, keep audit evidence, and roll back safely. Mon, 06 Jul 2026 00:00:00 GMT AI Agent Security Runtime Security Checklist https://clawmont.com/blog/mcp-tool-poisoning-runtime-defense/ https://clawmont.com/blog/mcp-tool-poisoning-runtime-defense/ MCP tool poisoning explained: poisoned tool descriptions, schemas, metadata, and results; where scanners help; and why runtime dispatch and result checks still matter. Mon, 06 Jul 2026 00:00:00 GMT MCP Security Tool Poisoning Runtime Security https://clawmont.com/blog/claude-code-security-lessons/ https://clawmont.com/blog/claude-code-security-lessons/ Claude Code advisories and the July 2026 reverse-shell case show the same pattern: the dangerous decision often happens at runtime, after static review says the project looks clean. Mon, 06 Jul 2026 00:00:00 GMT Claude Code Security CVE Analysis Agentic Security