Good policy is the hard part. So we're sharing ours.
The risk from AI agents isn't any one system — it's the path between them. Policy guards that path. It's hard to write — so we open-sourced a library of policies.
3 min read
Category — 5 posts
Security
Audit kept us honest. Agents don't care.
Audit worked because people feared getting caught. AI agents don't — so agent security must shift from audit to authorization across every system.
7 min read
Securing Claude Cowork
A practical guide to rolling out Claude Cowork safely: restrict risky access paths, route MCP through a policy gateway, and monitor what your agents actually do.
7 min read
Agentic AI security: why legacy controls fail AI agents
Legacy security controls were built for humans, not AI agents — that's why agentic AI security and governance are breaking. Here's the gap, and how to close it.
2 min read
Intent-Based Policies for AI
The policy model that closes the gap between what organizations mean and what their controls enforce.
7 min read