AI Security
Protecting AI systems from threats, vulnerabilities, and adversarial attacks
Hero Post
By Adesh Gairola
The list finally caught the god agent
A deterministic decision point outside the model, in the live path, that decides before every action executes: that's the TLDR of every mitigation in the 2026 OWASP LLM Top 10. Excessive Agency jumped from rank 6 to rank 3, checked for the first time against 7,714 real incidents instead of a practitioner vote alone. Read the mitigations, not the ranks, and they all converge on one prescription: mediate everything.
Featured Posts
By Adesh Gairola
Claude Tag: an agent that acts as itself, not on your behalf
Claude Tag puts @Claude in Slack as its own per-channel service account, not on behalf of the person who asked. That breaks the delegation model everyone converged on, where the audit log can still name a human. Useful, but it revives the old service-account problems with an AI on top.
By Adesh Gairola
Kill the God Agent: how we think about agent security
A God Agent is one model wired to every tool on one shared identity, holding the whole lethal trifecta at once: it reads untrusted content, touches private data, and talks to the outside world. You can't filter prompt injection out of that, so you change the architecture instead. Three deterministic moves: scope every agent, sign every call, stop every breach. Break even one leg of the trifecta and the blast radius shrinks.
By Adesh Gairola
Agent identity isn't solved. Here's the model I use anyway.
Agent identity makes more sense as four stacked layers: a tamper-proof token format, cryptographic proof of which workload is running, a delegation chain that keeps the human as the subject, and a way to onboard to a service an agent has never met. Climb all four and you've proven who the agent is. You still haven't proven that what it did was okay.
