9articles
Founder and CEO of Dtwo. Over two decades, Denis has taken security and SaaS products from concept to scale: he built Security Cloud Control Firewall Management (formerly Cisco Defense Orchestrator) from the ground up — now managing tens of thousands of devices across thousands of enterprises — and architected the cloud version of Aveksa's identity and access management platform that anchored its acquisition by RSA. He later co-founded Genie Life Sciences, a lab-automation company acquired by Eppendorf in 2024. Today he writes here about securing AI agents in the enterprise.
5 min read
A policy written once is wrong by next quarter. Here is the design we are building toward: policies that tighten and widen from how your workforce actually uses AI, from real-time signals like a new CVE, with a human accepting every change.
Security4 min read
Of all the questions to ask before handing an AI agent access to your systems, one does most of the work: if this goes wrong, what is the worst that can happen? Four versions of that question, and how to act on the answers.
Security7 min read
NVIDIA's OpenShell, announced September 28, decides what an agent can reach. Dtwo sits in its middleware hook and judges each call by its arguments and by what the session already did elsewhere. If you run agents in OpenShell, you still need that layer.
Security6 min read
Expressiveness and usability. Everything else on the vendor's feature list is one of those two in disguise.
Security5 min read
Claude Code can access our internal systems. Here are the guardrails: the policies that decide what my AI agent can actually reach, all published in our policy catalog.
Engineering9 min read
Cheap implementation moved the work upstream. Every architectural decision is now recorded in the same repo as code. It becomes the context for everything built after it, and gets revised when we turn out to be wrong.
Security3 min read
The risk from AI agents isn't any one system — it's the path between them. Policy guards that path. It's hard to write — so we open-sourced a library of policies.
Security7 min read
Audit worked because people feared getting caught. AI agents don't — so agent security must shift from audit to authorization across every system.
security2 min read
Legacy security controls were built for humans, not AI agents — that's why agentic AI security and governance are breaking. Here's the gap, and how to close it.