securing ai agent tool calling
-
What Is an AI Agent? A Security-First Breakdown
What is an AI agent? See how the model, tools and permissions loop really works, where agents break, and how to check one before it goes live.
-
AI Coding Agent Security: 7 Attack Paths to Test
AI coding agent security tested properly: seven attack paths from prompt injection to shell abuse, how to prove each one, and the controls that hold. Read on.
-
MCP Server Prompt Injection: Proving the Blast Radius
MCP server prompt injection is easy to demo and hard to prove. See how to test to consequence, scope tokens and write findings that hold up.
-
How to Red Team an LLM: A 5-Phase Field Guide
How to red team an LLM in five phases, from mapping tool permissions to proving consequence and writing findings that survive retest. See the method.
-
Automated LLM Red Teaming: What It Misses
Automated LLM red teaming finds jailbreaks at scale but misses tool abuse and excessive agency. See where to automate and what still needs a human.
-
MCP Server Penetration Testing: A Tester’s Checklist
MCP server penetration testing, step by step: map the tool surface, test tool poisoning and tool abuse, prove real impact. See the full checklist.