Your Voice AI Agent Takes Calls From Strangers. Who’s Checking?
Last week, US prosecutors indicted three people who allegedly used AI to impersonate both a CEO and a law-firm...
You Can’t Secure the Homegrown AI Agents You Don’t Know You Have
Ask a security team how many homegrown AI agents the organization runs, and the room usually goes quiet. Engineering...
Resilience by Design: Architecting Agentic Systems to Fail Safely, Not Catastrophically
Agentic AI fails differently than traditional software. When a service crashes, alerts trigger, processes restart,...
Introducing HAMMER, the Homegrown Agent Maturity Model for Execution & Risk
The Homegrown Agent Maturity Model for Execution & Risk (HAMMER): is a five-level framework with seven domains...
The First Questions That Matter: Triaging AI Agent Security Incidents
I have lived through major incidents firsthand, including the urgent calls that come in the middle of the night....
Building the Business Case for Agentic AI Security Across EMEA
Agentic AI security is a new budget line for most organizations, which means security buyers across EMEA often...
The First Questions That Matter: Governing an AI Agent Incident
I’ve been on enough middle-of-the-night incident calls to know what separates the organizations that recover quickly...
Stop Waiting for the Alert: Enforcing AI Agent Behavior with Zenity Boundaries
Every security team I talk to has some version of the same document. It might be called an “AI Acceptable Use Policy”...
Shadow AI: When Approved Experiments Create New Shadows
An AI innovation team is asked to build a customer support assistant in two weeks. The demo works, employees start...
Building the Business Case for Agentic AI Security Investment
Security investment decisions are always, at some level, conversations about risk quantification: how much exposure...
Architecting Trust: The Data Pipelines and Infrastructure Behind The Guardian Agents
As AI agents operate with increasing autonomy in enterprise production, the sheer volume of security telemetry...
When Agents Trust Each Other, One Compromised MCP Server Is Enough
The agentic AI security conversation has, for good reason, spent most of its energy on the agents an organization...
Five Ways AI Agents Actually Fail, and Why Most Security Programs Are Only Built for Two of Them
Most of the industry discourse on agentic AI risk has settled into a comfortable framing: agents get attacked the...
The Authorization Trap: Why "No Evidence of Manipulation" Doesn't Mean "No Incident"
Many conversations about AI agent risk over the past year start from the same unspoken assumption: something bad...
MCP Is Growing Up
Our team spends much of the week talking to security leaders and practitioners who are trying to figure out where...
The Agent Will See You Now: Why Healthcare's AI Agent Boom Needs Visibility and Control
Healthcare, as an industry vertical, is moving faster on agentic AI than it has in past technology evolutions....
"AI Regulation" Isn't One Debate. It's Several, Wearing the Same Coat.
Ask ten people what "AI regulation" means, and you'll get ten different answers, and most of them will assume the...
How Zenity Implements the 2026 OWASP Top 10 for LLM Applications
Every AI security framework names the risks you have to control. Zenity is built to implement those controls at...
Secure AI Agents, Everywhere: Why Prompt Injection Is Only Part of the Problem
The rules have changed. In every AI deployment, the agent itself is now part of the threat model, and that's a...
Coalition Chaos
I've tracked eighteen initiatives across a dozen countries, five months, and several issues being worked seven...
A Safer Future with Agents
We built agents to act on their own. We're somehow surprised when they do. Two weeks ago, OpenAI ran a cyber eval...
Seeing Thousands of Real Incidents Means I Have No Choice But to Share What I Know
The Sentence I Cannot Stop Thinking About A few years ago, I was sitting across from a security leader at a large...
What Auditors and Regulators Are Starting to Ask About AI Agents
The regulatory landscape for agentic AI is moving faster than most compliance programs are tracking. CISOs who...
Governance and Security Are Different Problems: Agentic AI Is Exposing the Gap Between Them
Many organizations still use the terms AI governance and AI security interchangeably. While they are closely related,...
Secure Your Agents
We’d love to chat with you about how your team can secure and govern AI Agents everywhere.
Get a Demo