agents
Safeguard articles tagged "agents" — guides, analysis, and best practices for software supply chain and application security.
7 articles
AWS Bedrock Guardrails for Agent Workloads: A Defender's Walkthrough
Bedrock Guardrails now span prompt filtering, contextual grounding checks, and tool-use policies. We trace how they fit into a supply chain threat model for production agents.
MCP Client-Side Security Considerations
The MCP client surface is often overlooked. We examine trust boundaries, schema handling, credential storage, and safe defaults for the agent side of the protocol.
Agent-to-Agent Security in Multi-Agent Systems
Multi-agent systems inherit every trust problem of single-agent systems and add a few more. Here is how the threat model actually shifts.
Sandboxing LLM Agent Code Execution: Patterns
If your agent can execute code, something it reads from the internet can execute code. Pick your sandbox before the agent picks one for you.
Prompt Injection as a Supply Chain Risk in 2026
Prompt injection stopped being an LLM curiosity the moment agents started committing code. It is now a software supply chain risk and should be modeled as one.
The MCP Threat Model: What Actually Matters in 2026
Most MCP threat models confuse protocol risk with deployment risk. Here is what the real attack surface looks like after a year of production incidents.
Securing Claude Code MCP Server Deployments
Claude Code MCP servers run with the privileges of the developer who invoked them. That makes deployment posture the entire security model.