Defensive Architecture & Security Controls

Knowing where the attack surface is only half the work—the harder problem is building systems that resist exploitation under real operating conditions. This category covers concrete defensive patterns for agentic systems: sandboxing tool execution, enforcing least-privilege credential delegation, designing trust boundaries in multi-agent pipelines, and implementing runtime controls that don't cripple the autonomy you're trying to protect. The focus is architectural decisions that hold up when things go wrong, not checklists that look good in a review.

• The Agentic SOC Is Here: How Salesforce, Datadog, and GreyNoise Are Putting Autonomous Agents on the Front Line —
• Google's Heather Adkins and Four Flynn on Weathering AI's "Perfect Storm" of Security Risk — Heather Adkins and Four Flynn's AI security strategy for agentic systems - from treating agents as untrusted intermediaries to hardening prompt injection defenses in
• Stripe, Snap, and Sondera on Stopping Prompt Injection Without Neutering Your Agents — Stripe, Snap, and Sondera's practitioners explain why prompt engineering is not a security boundary for agentic systems - and what capability-based authorization actually looks like in production.
• How Snowflake, FFF Enterprises, and Sysdig Are Building AI Governance That Doesn't Kill Innovation — Ragini Ramalingam, Billy Norwood, and Sergej Epp are building enterprise AI governance that actually works - here's the risk-based model replacing the approval-gate approach.
• Inside Trail of Bits' AI-Native Transformation: Dan Guido on Building a Security Firm Around Autonomous Agents — Dan Guido and Trail of Bits show why AI-native security consulting requires rearchitecting for autonomous scale - not wrapping LLMs around existing processes.
• Human Oversight in Agentic Systems: What Governance Actually Looks Like in Production — Human oversight in agentic systems fails not because the controls are missing but because they are designed for the ideal case, not the production one.
• Incident Response for Agentic AI: What to Do When an Agent Has Already Acted — When an agent has already acted, incident response for agentic AI means reconstructing the action chain, containing real damage, and preventing the same failure from recurring.
• From RBAC to ABAC: A Practical Access Control Roadmap for AI Agents and Autonomous Systems —
• How Open-Source Security Layers Are Closing the Safety Gaps in Agentic AI Systems —
• Inside Agentic AI Architectures: How Prompts, Timers, and Skill Modules Shape Agent Behavior —
• Sandboxing AI Agent Tool Calls: An Isolation Architecture — Tool misuse in agentic systems rarely looks like a breach - it looks like permitted behavior in an unanticipated sequence, which is exactly why tool call sandboxing requires runtime isolation, not just access control.
• Detecting Malicious Tool Calls in Agentic AI Systems —
• Defending Agentic AI Memory: Detection and Isolation Controls — Memory poisoning in agentic AI systems corrupts stored state that persists across sessions - here is how to detect it, isolate it, and verify memory integrity before it becomes an incident.
• Runtime Monitoring for AI Agents: What to Watch, What to Log, and What to Alert On — Runtime monitoring for AI agents requires semantic observability, not just latency thresholds - here's what to log, what to alert on, and where conventional monitoring fails.
• Defensive Architecture Principles Every Security Team Needs — Defensive architecture principles give security teams the structural guardrails to constrain agent behavior before something goes wrong - not after.
• Securing Agentic AI: Controls Your Architecture Needs Now — Securing agentic AI requires controls your architecture probably doesn't have yet - here's how to build them before something goes wrong.
• Defense-in-Depth for AI Pipelines: A Layered Control Guide — Defense-in-depth for AI pipelines means layering input, model, output, execution, and monitoring controls so that when one safeguard fails, others are already in place.
• Zero Trust Architecture: What It Actually Means to Implement It — Zero Trust Architecture means more than buying new tools - here's what actual implementation looks like, step by step.
• Least Privilege Is Harder With AI Agents — Here's Why — Least privilege gets genuinely hard with AI agents - here is why the traditional model breaks and what you can do about it.