MCP Security: How to Secure Agents, Tools, and Servers
MCP security in practice: the main Model Context Protocol risks, from indirect prompt injection to excessive privileges, and a practical hardening framework for agents, clients, and servers.
-
-
Agentjacking: When Your AI Assistant Becomes a Weapon
Agentjacking exploits the blind trust AI assistants place in MCP data. One fake Sentry event and your agent executes malicious code.
-
MCP Security: Tools and Permissions in Practice
MCP Security in practice: a safe lab with fictional documents, a mocked local agent, controlled tool exploitation, permissions, schemas, and auditable logs.
-
AI Red Team: 12 Failures Beyond Prompt Injection
A practical AI Red Team guide for testing agents, RAG, memory, tools, and autonomy workflows beyond prompt injection, with checklists, metrics, and controls.
-
AI Recon: LLMs, RAGs, and Agents
Authorized reconnaissance for enterprise AI: map LLMs, RAG pipelines, agents, tools, IAM, APIs, cloud exposure, and evidence without drifting out of scope.
-
Autonomous Pentest Agent: AI, Red Team, and Attack Chains
Autonomous Pentest Agents can accelerate Red Team operations, but they also introduce risk around prompt injection, tool misuse, scope control, evidence quality, and detection.
