Agent Security

No Last Day

Every employee who leaves gets an offboarding. The agent your team stood up in March never will. Protection that depends on where data sits can't keep up with something whose job is to move it.

Assume Your Agent Is Fooled

Prompt injection matters because of what the agent is allowed to do next. Tool permissions, output channels, and agent identity are where that gets decided — or doesn't.

Memory Is a Data Store

When an agent remembers what matters to you, it can also remember what an attacker told it. Persistent memory needs the same governance as any other place sensitive data lives.

Encrypted. Still Readable.

The warehouse was encrypted. Every analyst could still read every Social Security number. This is how a hospital stopped moving real patient identifiers into places that only needed to join on them.

Finding Shadow Assistants Before They Found Us

Employees were sending sensitive data, including AWS secret keys, to assistants nobody had approved. I paired DSPM with endpoint and inline DLP to find it, then rebuilt policy around corporate versus personal assistant instances, cutting false positives by about two-thirds.

Cyera · Microsoft Purview · Zscaler