Resources
AI security guides
Practical guidance for evaluating, deploying, and securing AI systems.
Copilot telemetry gaps
General AnalysisCopilot flags telemetry gaps: Recheck BYOK usage conclusions
Use Copilot's new telemetry-gap fields to review BYOK reporting, preserve unknown values, avoid double counting, and identify evidence missing from a security review.
Copilot review API controls
General AnalysisCopilot adds review settings APIs: Verify policy and tool access
Roll out GitHub Copilot code review settings through the API. Check effective policy, credential scope, MCP access, and the limits of review-source attribution.
Claude sign-out and containment
General AnalysisClaude adds Enterprise sign-out: Verify incident containment
Use Claude's new Enterprise sign-out API with checks for organization scope, partial failures, returning sessions, and cloud work that continues after sign-out.
Claude thread replay
General AnalysisClaude adds message threads: Check identity before replay
Review Claude message-thread recovery before rollout: bind saved history to its workspace and identity, approve retention, and prevent unintended tool retries.
Copilot plugin policy
General AnalysisCopilot plugin controls reach GA: Verify required and optional installs
Roll out GitHub Copilot plugin controls with separate marketplace restrictions, required plugins, repository defaults, and checks for policy delivery and updates.
When auto review takes effect
General AnalysisAgents API adds auto review: Migrate running sessions safely
Enable OpenAI Agents API auto review with checks for existing turns, tool replacement timing, delayed function calls, and incomplete work after a denial.
Keep every actor in the total
General AnalysisClaude launches a new cost API: Preserve actor attribution
Migrate to Claude's Usage and Cost Analytics API with checks for missing actors, incomplete pages, stale exports, and agreement with organization totals.
Review what Dreaming changes
General AnalysisCopilot Dreaming enters preview: Review changes outside pull requests
Review Copilot Dreaming's automatic memory and code-review guidance changes, limit repository scope, and reconcile retained context after disabling the preview.
Copilot app identity
General AnalysisCopilot adds app authentication: Audit access and spending
Review Copilot's new GitHub App authentication: prevent credential fallback, reconcile app-attributed usage, and verify installation suspension before rollout.
Who approves Copilot?
General AnalysisCopilot assisted permissions reaches GA: Keep human gates explicit
Review Copilot assisted permissions after its October 26 launch: enterprise ask rules, human-only gates, session defaults, and unattended approval failures.
Employee AI spending
General AnalysisEmployee AI Spend Management: Best Practices for 2026
Manage employee AI spending across Claude Code, Codex, Gemini, API keys, and gateways, with budget controls, dashboard steps, and subscription checks.
Revoke access. Verify agents stop.
General AnalysisClaude's Google Cloud launch: Verify agent access revocation
Review Claude's Anthropic-managed Google Cloud launch with an offboarding checklist for IAM access, schedules, running agents, and retained audit evidence.
MCP tasks after disconnect
General AnalysisClaude Code adds MCP tasks: Verify cancellation before retrying
Review Claude Code MCP task cancellation, task ownership, approval expiry, and downstream evidence before allowing durable jobs or retrying uncertain actions.
Audit Claude Tag access
General AnalysisClaude Tag API enters beta: Audit inherited Slack access
Use the Claude Tag API beta to audit inherited Slack settings, reconcile missing access grants, and verify changes in fresh and existing threads.
1Password agent login grants
General Analysis1Password for Agents launches: Review reusable login access
Review 1Password for Agents and its partner-preview autofill contract: grant lifetime, task isolation, browser access during fills, and connection revocation.
Claude customer restrictions
General AnalysisClaude adds customer enforcement status: Poll before restoring access
Use Claude's new user-profile enforcement fields to poll customer restrictions, preserve local suspensions, and prepare for future webhook delivery.
Where containment failed
General AnalysisThe OpenAI and Hugging Face incident: How containment failed
How shared infrastructure let evaluation agents communicate and reach external systems, and what security teams should verify around their own agents.
Claude inference hooks
General AnalysisClaude inference hooks reach GA: Verify blocking before rollout
Verify Claude Enterprise inference hooks with prompt and tool-call checks, failure-policy tests, and an outage recovery plan before expanding enforcement.
Claude Code auto mode
General AnalysisClaude Code Auto Mode: Permissions and Prompt Injection Defense
What Claude Code Auto mode reviews, how it handles prompt injection, and why permission checks still need sandboxing, restricted credentials, and deployment-specific evaluation.
Copilot: Verify model access
General AnalysisCopilot adds a model policy API: Verify access after removing grants
Use GitHub Copilot's model policy API to collect before-and-after evidence, find overlapping team grants, and avoid restoring inherited access as explicit policy.
Defender: Discovered or protected?
General AnalysisDefender expands AI agent discovery: Verify protection separately
Reconcile Microsoft Defender's local AI agent inventory with expected devices and users, then verify runtime support and effective protection modes separately.
Copilot indexed permissions
General AnalysisCopilot connector mappings become editable: Verify indexed access
Verify Microsoft 365 Copilot connector permissions after identity mapping changes, with ServiceNow crawl distinctions and a before-and-after access checklist.
Verify the autofix
General AnalysisGitHub agentic autofix reaches GA: Verify the original scanner
Review GitHub agentic autofix with read-only evidence collection, original-scanner checks, PR commit matching, and branch-specific alert reconciliation.
Audit saved instructions
General AnalysisClaude adds saved-instruction exports: Build a complete audit snapshot
Audit Claude and Cowork saved instructions with complete pagination, scoped access, and snapshot comparisons that distinguish unset values from missing records.
Check missing trace evidence
General AnalysisClaude adds API traces: Check missing security evidence
Verify Claude API OpenTelemetry coverage with request reconciliation and checks for sampling, denied tools, SDK export, and missing investigation evidence.
Claude Desktop SneakPeek
General AnalysisSneakPeek disclosed: Check Claude Desktop patches and past exposure
Respond to the SneakPeek disclosure with Claude Desktop version checks, update-policy verification, and an exposure review covering preview-renderer activity.
Verify every workflow result
General AnalysisClaude adds dynamic workflows: Verify every review result
Verify Claude Managed Agents dynamic workflow results against expected inputs, recover event history, and close unfinished runs while preserving review evidence.
Claude Managed Agents web access
General AnalysisClaude Managed Agents tightens web access: Review both allowlists
Adapt to Claude Managed Agents' October 7 web access change. Reconcile allowed_hosts with tool domains and restore research without broadening shell access.
Copilot retention separates from Teams
General AnalysisCopilot retention separates from Teams: Prepare for October
Prepare for legacy Teams policies to stop covering Microsoft 365 Copilot. Inventory both policy families, set explicit scope, and verify retention evidence.
Codex Security Cloud coverage
General AnalysisCodex Security Cloud expands: Check continuous-scan coverage
Review Codex Security Cloud coverage across default-branch monitoring, threat-model changes, funding pauses, and validation evidence before accepting a scan.
Copilot computer use: Revoke active access
General AnalysisCopilot adds computer use: Revoke app access in every session
Manage GitHub Copilot computer-use permissions with a fleet disable policy, an app-approval lifetime map, and a checklist for ending access across CLI and app sessions.
Claude Code mods
General AnalysisClaude Code launches mods: Verify enterprise controls before rollout
Configure Claude Code mods for enterprise use: preserve sec-default, restrict user mods, verify managed plugin origins, and check reload and policy failures.
PixelLeak screenshot security
General AnalysisPixelLeak disclosed: Keep agent screenshots inside private review
Respond to PixelLeak with a private screenshot upload path, GitHub destination checks, and a cleanup record covering repository history, release assets, and copies.
Dots access and shutdown
General AnalysisOpenAI launches Dots: Review access and stop delegated work
Review OpenAI Dots security controls across local and cloud execution, app permissions, delegated tasks, schedules, and the evidence needed to verify shutdown.
Sonnet 5.5 cyber fallbacks
General AnalysisSonnet 5.5 adds cyber fallbacks: Keep security reviews complete
Handle Sonnet 5.5 cyber refusals and model fallback without treating an incomplete security review as a clean result. Includes an illustrative response gate.
OpenShell policy boundaries
General AnalysisNVIDIA launches Open Agent Safety Platform: Verify the policy
Review NVIDIA OpenShell policy before rollout: distinguish proposal approval from boundary proof, inspect provider-added access, and confirm loaded permissions.
Copilot app telemetry
General AnalysisCopilot app adds OpenTelemetry: Verify export and content controls
Configure GitHub Copilot app OpenTelemetry, keep content capture disabled, and verify policy delivery, collector receipt, and monitoring gaps before rollout.
Copilot: From chat to repository
General AnalysisCopilot expands Slack and Teams context: Review what reaches GitHub
Review GitHub Copilot's expanded Slack and Teams context, acting identity, repository defaults, and retained artifacts before enabling conversation-driven work.
Copilot: Review feature defaults
General AnalysisCopilot's new feature default: Review access before October 22
Prepare for GitHub Copilot's October 22 feature default with explicit policy decisions, documented exceptions, and checks for users licensed by multiple organizations.
Copilot sandbox: Check every session
General AnalysisCopilot app adds local sandboxing: Require it across sessions
Roll out GitHub Copilot app local sandboxing with mandatory managed policy, session restart checks, and diagnosis of filesystem, credential, and OS limits.
Claude API MCP tool-list pinning
General AnalysisClaude API adds MCP tool-list pinning: Review changes before use
Use Claude API MCP tool-list pinning to preserve reviewed definitions, control the first request, and separate schema changes from server authorization.
Claude Code account sync
General AnalysisClaude Code adds account sync: Review what reaches terminals
Review Claude Code account-synced skills and plugins: compare execution behavior, configure managed opt-outs, and verify removal across terminal sessions.
Copilot approvals and human review
General AnalysisCopilot can approve pull requests: Preserve required human review
Configure Copilot pull request approvals without losing required human review. Check counting policy, mixed-file changes, stale approvals, and review evidence.
ChatGPT plugin account boundaries
General AnalysisChatGPT adds multi-account plugins: Keep actions in the right account
Review ChatGPT multi-account plugin security across credential routing, cached results, write approvals, and source-to-destination data transfers.
Copilot metrics: What stays hidden
General AnalysisGitHub Copilot adds CLI metrics: Reconcile MCP activity with security evidence
Use Copilot's new CLI customization metrics to investigate MCP activity while preserving reporting gaps, hidden names, and the distinction between connections and actions.
Plugin4Shell: Check the checkout
General AnalysisPlugin4Shell disclosed: Check coding-agent plugin sources
Respond to Plugin4Shell by checking actual plugin source hosts, deploying verified agent fixes, and reviewing installed copies separately from update settings.
Claude merges Chat and Cowork
General AnalysisClaude Chat and Cowork merge: Review carried-over permissions
Review retained connectors, folder grants, approval preferences, and cloud tasks after Claude's September 16 Chat–Cowork merger announcement.
Salesforce in Claude: Review access
General AnalysisSalesforce in Claude beta: Review access before rollout
Review Salesforce in Claude's beta plugin, distinguish its setup from custom MCP connections, and verify user permissions, action approvals, and audit evidence.
Codex sandbox escapes
General AnalysisCodex sandbox escapes disclosed: Verify both upgrade paths
Respond to the September 15 Codex sandbox disclosures with separate CLI and desktop upgrade checks, helper inventory, and an evidence-based exposure review.
Claude Managed Agents tool approvals
General AnalysisClaude Managed Agents: Require approval for sensitive tools
Configure Claude Managed Agents tool approvals, separate customer intent from reviewer authority, and recover pending calls without blindly repeating actions.
Claude account restrictions
General AnalysisClaude account restrictions: Close personal access and old connections
Deploy Claude tenant and connector restrictions, review existing OAuth grants, and verify which account and network paths your Enterprise rollout covers.
Agents API sandbox lifecycle
General AnalysisOpenAI Agents API: Manage self-hosted sandbox lifecycles
Connect an Agents API self-hosted sandbox, handle reconnects and uncertain tool outcomes, and clean up session state and provider compute without leaving orphaned work.
Copilot managed permissions
General AnalysisGitHub Copilot managed permissions: Deploy and verify policy
Deploy GitHub Copilot managed permissions, check which users receive them, resolve team and device policy conflicts, and verify approval behavior before rollout.
Copilot audit evidence
General AnalysisMicrosoft 365 Copilot: Collect prompts and reconcile audit logs
Collect Microsoft 365 Copilot prompts and responses through Graph, reconcile them with Purview audit records, and track missing evidence without assuming full coverage.
Claude ant apply in CI
General AnalysisClaude ant apply in CI: Preserve state when deployments fail
Use Claude ant apply in CI with reviewed plans, scoped workload identity, serialized updates, and a recovery procedure that preserves partial deployment state.
OWASP LLM Top 10 2026
General AnalysisOWASP LLM Top 10 2026: From Rankings to Runtime Controls
A technical guide to the OWASP LLM Top 10 2026: its evidence-weighted ranking, model-versus-agent boundary, and the controls to verify before release.
OWASP Agent Control Standard
General AnalysisOWASP Agent Control Standard (ACS): What It Controls and What It Doesn't
A technical guide to the OWASP Agent Control Standard: its Guardian boundary, v0.1 schemas, roadmap gaps, failure modes, and an implementation test plan.
Claude Code Enterprise Security
General AnalysisClaude Code Enterprise Security Deployment
Enterprise deployment guide for Claude Code security across managed settings, identity, dev containers, proxy controls, MCP, hooks, OpenTelemetry, CI/CD, and governance.
Control & Observability
General AnalysisClaude Code Control and Observability with OpenTelemetry
Set up Claude Code OpenTelemetry (OTel), lock the collector destination, audit tool and MCP events, and route production telemetry to a SIEM.
Settings, Permissions & Bash
General AnalysisClaude Code Settings, Permissions, and Bash Tool Security
A practical guide to Claude Code settings, permission rules, Bash tool controls, hooks, MCP allowlists, telemetry, and safe defaults for developer teams.
Automated Penetration Testing
General AnalysisBest Automated Penetration Testing Platforms in 2026
A practical 2026 buyer guide to automated penetration testing platforms, autonomous pentesting, automated security validation, CTEM, DAST, BAS, and AI security testing.
AI Security Platforms
General AnalysisBest AI Security Platforms in 2026
Compare AI security platforms by discovery, agent controls, red teaming, runtime protection, and model security, with dated sources and practical buying questions.
Claude Cowork Security Risks
General AnalysisSecurity Guidance for Claude Cowork and Risks
Claude Cowork can reach local files, browser sessions, plugins, MCP servers, scheduled tasks, connectors, and approved desktop apps. This guide explains the main Claude Cowork risks and the security controls enterprises should put in place before broad rollout.
Claude Code Security Best Practices
General AnalysisAnthropic Claude Code Security Best Practices
Security best practices for Anthropic Claude Code across permissions, Bash, hooks, MCP, sandboxing, proxy controls, telemetry, and CI/CD workflows.
Securing Claude Code
General AnalysisHow to Secure Claude Code
A practical enterprise guide to securing Claude Code with permissions, sandboxed Bash, dev containers, managed settings, MCP allowlists, hooks, proxy controls, OpenTelemetry, and CI/CD release gates.
AI Red Teaming Tools
General AnalysisBest AI Red Teaming and Adversarial Testing Tools in 2026
Compare PyRIT, garak, Inspect, DeepTeam, and commercial AI red teaming tools by use case, evidence, and operating cost. Includes a free evaluation worksheet.
Securing Coding Agents
General AnalysisHow to Secure Coding Agents
A concise summary of the General Analysis technical whitepaper on securing Claude Code, OpenAI Codex, Cursor, Windsurf, Devin, GitHub Copilot, and Claude Cowork.
Detecting Shadow AI
General AnalysisHow to Detect Shadow AI
A practical guide to detecting shadow AI across browser extensions, SWG endpoint agents, network telemetry, SaaS logs, endpoint agents, AI gateways, and MCP gateways.
MCP Server Security
General AnalysisMCP Server Security: A Threat Model for Agent Tool Supply Chains
MCP servers put executable code, tool schemas, credentials, and agent context in one path. This primary-source threat model covers nine attack classes, current CVEs, and the controls that contain them.
Claude Cowork vs Claude Code
General AnalysisClaude Cowork vs Claude Code: Security Differences for Enterprise
Claude Cowork and Claude Code share an agentic architecture but ship very different enterprise controls. A primary-source comparison of sandbox, network, audit-log, MCP, and decision-framework differences for security teams.
Claude Compliance API
General AnalysisHow to Audit Claude with the Compliance API
Anthropic's Compliance API exposes activity events, Claude.ai content, organization settings, and supported Cowork and Claude Code session transcripts. This guide explains current coverage, setup, retention, exclusions, and the controls that still need a separate enforcement layer.
Securing Claude Cowork
General AnalysisHow to Secure Claude Cowork
Claude Cowork brings Claude Code-style agentic work to local files, browsers, apps, plugins, and scheduled tasks. Here is how to put a middleman proxy, browser controls, computer-use limits, and enterprise monitoring around it before using it on real work.
What Is AI Red Teaming?
General AnalysisWhat Is AI Red Teaming? A Practitioner's Guide
AI red teaming is adversarial testing of AI systems to find exploitable vulnerabilities before attackers do. Learn how it works, key techniques, real exploit examples, and how to implement it.
What Are AI Guardrails?
General AnalysisWhat Are AI Guardrails?
A complete guide to AI guardrails: what they are, the eight main types, how they work architecturally, and how to evaluate them for production LLM and agentic deployments.
OWASP Agentic AI Top 10
General AnalysisOWASP Top 10 for Agentic AI: What Matters Most?
An analytical guide to the OWASP Top 10 for Agentic Applications 2026: what the ten risks are, how they relate to each other, and what they imply for builders of agentic systems.
AI Guardrails
General AnalysisBest AI Guardrails in 2026: Tools, Architecture, and How to Choose
Compare AI guardrails by control type, deployment, and limitations. Learn how to measure false positives, latency, and policy coverage before choosing a tool.