Agent Communication Protocols
Google A2A Protocol Capability Negotiation and Trust Model
Google's agent protocol solves discovery but leaves trust to organizations.
Hana Vidal
· 8 min read
AI Agents
Agent Communication Protocols
Context Window Hijacking Across Agent Communication Channels
Attackers forge agent authority by injecting instructions through unverified context sources.
Grant Larsen9 min read
Access Control for Agents
AWS Bedrock Agent IAM Role Scoping and Least Privilege
Secure Bedrock agents by scoping four IAM role layers to prevent autonomous privilege abuse.
Hana Vidal8 min read
IaC and Pipeline Security
Misconfiguration Patterns in Pulumi and CDK Agent Infrastructure
Agent-written infrastructure fails in patterns human review never catches.
Leila Underwood10 min read
IaC and Pipeline Security
Container Image Security for Containerized AI Agent Deployments
AI agents turn container images into runtime attack surfaces that static scanning cannot defend.
Grant Larsen10 min read
IaC and Pipeline Security
IaC Scanning Tools for AI Agent Infrastructure
Agents exploit insecure infrastructure defaults faster than humans ever could.
Leila Underwood10 min read
OWASP Agentic AI Risks
OWASP Agentic AI vs OWASP LLM Top 10 Compared
OWASP split AI security into two frameworks because models now act, not just talk.
Leila Underwood11 min read
OWASP Agentic AI Risks
OWASP Agentic AI Top 10 Taxonomy Overview
Autonomous AI systems demand new security controls around what agents do, not just what they say.
Theo Farrell10 min read
Access Control for Agents
MCP Server Security Hardening for Agent Authorization
Hardening MCP servers requires OAuth, token exchange, and runtime checks beyond the spec.
Grant Larsen11 min read
Agent Lifecycle Management
Agent Decommissioning Procedures and Credential Cleanup
Stopping an agent's process leaves its credentials live and fully authorized to act.
Leila Underwood9 min read
Agent Lifecycle Management
Agent Ownership Models and Accountability Structures
Organizations are doubling agent deployments without naming who owns them.
Hana Vidal10 min read
Access Control for Agents
API Key Rotation Strategies for Autonomous Agent Pipelines
Agents need credential rotation built for their own mechanics, not borrowed from human systems.
Theo Farrell9 min read
