AI Security
Safeguard articles tagged "AI Security" — guides, analysis, and best practices for software supply chain and application security.
100 articles
How do you limit AI agent tool arguments: paths, recipients, amounts?
Allowing a tool is not enough. Constrain its arguments too: file paths, email recipients, record IDs and amounts, checked by code outside the model.
Can AI agents get tool access just in time instead of standing access?
Yes. Grant an AI agent a risky tool for one task or a short window, then let it expire. How time boxed tool grants work and which tools deserve them.
What isolation should a coding agent have if it skips prompts?
Skipping permission prompts removes the human check. Anthropic says to run such sessions in a container, VM, or sandbox runtime. Here is what to set up.
Is torch.load safe? What weights_only does and does not cover
torch.load unpickles by default, so the file source matters. See what weights_only=True restricts, what it leaves alone, and how to load checkpoints.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.