AI agent security topic hub

AI agent security articles, tools, controls, and runtime guidance

Use this hub for agent security research that starts broad: definitions, controls, tools, checklists, posture management, identity, data exfiltration, monitoring, testing, and where local runtime protection fits.

· 11 articles · 3 guides

Search questions this hub answers

What is AI agent security?

What are AI agent security tools?

What are AI agent security controls and best practices?

How should teams monitor and audit AI agent behavior?

11 min read

AI Security Posture Management (AI-SPM): What It Covers and Where Runtime Takes Over

AI security posture management explained: agent and tool inventory, credential mapping, configuration baselines, posture drift detection, and the runtime gap that posture scans cannot see.

AI Agent SecurityPosture ManagementRuntime Security
11 min read

Guardrails, Sandboxes, and Gateways: AI Runtime Security Compared

Three control families claim the "AI runtime security" label. What inline guardrails, OS sandboxes, and gateways each catch, what each is structurally blind to, and how to combine them.

Runtime SecurityAI Agent SecuritySecurity Tools
12 min read

Prompt Injection Detection: How Pattern Matching, Classifiers, and LLM Judges Compare

Prompt injection detection methods compared: deterministic pattern checks, ML classifiers, and LLM judges - the recall, false-positive, and cost trade each makes, and how to evaluate a detector honestly.

Prompt InjectionAI Agent SecurityRuntime Security
11 min read

Claude Code Security: A Practical Hardening Guide for Local Coding Agents

Six controls that harden Claude Code and other local coding agents: untrusted-input discipline, least privilege, config-write protection, credential scoping, egress limits, and audit evidence.

Claude Code SecurityAI Agent SecurityRuntime Security
12 min read

AI Agent Security Monitoring: Audit Logging, Runtime Telemetry, and Forensics

What an AI agent audit log should actually capture — prompts, tool calls, results, policy decisions — how to keep it tamper-evident, and how to reconstruct an incident from the evidence after something goes wrong.

AI Agent SecurityMonitoringAudit Logging
12 min read

AI Agent Data Exfiltration: Prompt Injection, Tools, and Runtime Defense

How agents leak data: an attacker plants instructions in content the agent reads, the agent retrieves something sensitive, then sends it out through a legitimate tool. What each defense layer can and cannot see along that path.

AI Agent SecurityData ExfiltrationPrompt Injection
12 min read

AI Agent Memory Poisoning: Persistent Memory Risk and Runtime Defense

Poisoned memory persists: instructions planted in an agent's stored context re-enter every later session. Why retrieval is the choke point, and the provenance, audit, and rollback controls that limit the damage.

AI Agent SecurityMemory PoisoningAgentic Security
10 min read

Agentic Ransomware: What JADEPUFFER Means for AI Agent Security

JADEPUFFER and clean-repo coding-agent exploits show why AI agent security needs runtime action checks, credential boundaries, egress controls, and audit evidence.

Agentic SecurityAI Agent SecurityRuntime Security
11 min read

NSA MCP Security Guidance: What It Means for AI Agents

NSA, CSA, IETF, and official MCP guidance translated into runtime controls for AI agents: trust boundaries, identity, tool validation, execution checks, and audit evidence.

MCP SecuritySecurity GuidanceAI Agent Security
12 min read

AI Agent Runtime Security Checklist

A practical checklist for securing AI agents at runtime: inventory tools, scope credentials, inspect inputs, check tool dispatch, screen tool results, verify outputs, keep audit evidence, and roll back safely.

AI Agent SecurityRuntime SecurityChecklist
11 min read

What 22 Claude Code Security Advisories Teach Us About AI Agent Security

Claude Code advisories and the July 2026 reverse-shell case show the same pattern: the dangerous decision often happens at runtime, after static review says the project looks clean.

Claude Code SecurityCVE AnalysisAgentic Security

Guides for this topic

Primary source page

For a concise definition and product-level framing, start with AI agent security product page. The articles above expand the surrounding search intents and link back to the canonical Clawmont topic page.