Security
43 guides tagged “Security”.
- How to Rotate Credentials an Agent Can Reach Inventory what the agent can read, issue short-lived credentials, rotate on a schedule and after any suspicion, and verify the old one is dead.
- What Is Agent Isolation (and Why Containers Aren't Enough)? Isolation bounds what a run can reach: files, network, credentials, and the host. A container without those controls is mostly packaging.
- How to Audit an MCP Server Before You Connect It Check what the server exposes, what credentials it holds, where it can reach, and whether you can see what it did. Then pin it.
- How to Detect a Rogue Agent Run Detect by behaviour, not intent: unexpected tool calls, egress, mass reads, privilege changes, and actions outside the task's declared scope.
- How to Keep Secrets Away From an AI Coding Agent Remove secrets from the agent's reach: no .env in the workspace, scoped tokens per run, a proxy for third-party calls, and logs that stay clean.
- How to Respond to an AI Agent Security Incident Contain the run, revoke the identity, preserve the trail, then scope what left. The agent is usually the first step, not the whole incident.
- How to Restrict What an Agent Can Reach on the Network Give the agent an allowlist, not the internet: proxy the calls it needs, block metadata endpoints, and log every destination.
- How to Review an Agent's Tool Permissions Inventory the tools, map each to a task, remove what nothing needs, and test the boundary with a request the agent should refuse.
- How to Run a Security Review on Every Pull Request Wire a review into CI with a narrow scope, evidence-based output, and a human owner for verified high-severity findings.
- What Is Agent Skill Poisoning? Skill poisoning is a skill whose instructions make the agent do something harmful: run a payload, read secrets, or widen its own permissions.
- What Is an Agent Audit Trail? An agent audit trail records what the agent did, with which identity, on whose instruction, and with what result — outside the agent's control.
- What Is an Automated Security Review (and What Does It Miss)? An automated security review reads a diff against known vulnerability classes. It finds patterns, not absent features, and it needs triage.
- What Is Least Privilege for AI Agents? An agent should hold the narrowest credential and tool set its current task needs, for the shortest time, with every use attributable.
- What Is MCP Tool Poisoning? Tool poisoning hides instructions in an MCP tool's name or description, so the model follows the tool's text instead of its documentation.
- What Is the Confused Deputy Problem in AI Agents? The agent has permission the content does not. Untrusted text tells it to act, and it acts with its own authority on the attacker's behalf.
- How to Audit an Agent Skill Before You Install It Read what the skill tells the agent to run: download-and-execute steps, broad file reads, permission changes, and hidden network calls.
- What Are Agent Mods (and Should You Use Them)? A mod is a packaged bundle of agent customisation: instructions, commands, and hooks installed as one unit. Convenience and risk arrive together.
- What Happens If You Operate in China Without ICP Filing? Mainland hosting without a filing is blocked at the access layer, and a business faces rectification orders and penalties. The domain can also suffer.
- What Is a CI Runner (and When Do You Need Your Own)? The runner executes pipeline jobs. Hosted runners are ephemeral and easy; self-hosted ones are cheaper at scale and a credential risk if done wrong.
- What Is an SSL/TLS Handshake (and Why Does It Fail)? TLS agrees on a version and cipher, verifies the certificate, and derives keys. Most failures are a name, a chain, or a protocol mismatch.
- What Is PSB Filing (公安备案)? PSB filing is the public security registration that follows ICP filing, completed on the national platform within a window after go-live.
- How to Connect an AI App to Production Data Securely Do not hand the model a database credential. Put a scoped tool layer between model and data, with tenant filters and an audit trail.
- What Is an AI Gateway? An AI gateway centralises provider keys, routing, limits, caching, logging, and fallback. It also concentrates secrets and prompts in one place.
- Can Prompt Injection Manipulate a Decision Model? Decision models return typed labels, not text, but their state is untrusted input. How injection can steer a choice and how to defend the layer.
- How to Use Jev as an LLM Guardrail Screen LLM inputs and outputs with Jev: define hazard questions, batch them into one call, map probabilities to pass, review, block, or support.
- Laya Security: Pin Checkpoints, Verify Digests, and Protect laya-serve Secure a local Laya deployment: pin checkpoint revisions, verify SHA-256 digests, authenticate laya-serve, and treat model answers as recommendations.
- Give Your Coding Agent Its Own Sandbox An intermediate journey: isolate an AI coding agent in a container, strip its credentials, restrict network egress, and verify the boundary by testing it.
- Add an AI Feature Without Adding an Attack Surface A project-based journey: map the new attack surface an LLM feature adds, defend against prompt injection, scope credentials, validate output, and cap cost.
- Add Accounts and Login to Your App A project-based journey for AI builders: choose an auth method, hash passwords, add sessions, and prove one user cannot read another user's data.
- Run a Security Pass Before Real Users A project-based journey: inventory your attack surface, close the failures AI code ships by default, add scanning to CI, and rotate what may have leaked.
- Kubernetes Security for AI Builders: Hardening the Cluster Your Assistant Configured A default cluster trusts everything inside it. Learn RBAC, network policies, pod security, Secrets, and image hardening — the Kubernetes security work your AI's manifests skip.
- Kubernetes for AI Builders: Run What Your Assistant Generates Without Wrecking Production Your AI writes Kubernetes manifests it doesn't understand. Learn the objects, the failure modes, the cost traps, and the security gaps — with every linked guide.
- Authentication and Authorization for AI Builders: Who You Are, and What You're Allowed to Touch Login, sessions, JWTs, OAuth, passkeys, and the object-level checks your AI assistant skips. Every auth concept a vibecoder needs, with a linked guide for each.
- The 12 Authentication Mistakes That Show Up in AI-Generated Apps Reversible password storage, unverified tokens, sessions that never die, enumerating logins, bypassable MFA, and unprotected endpoints — twelve auth defects generated code ships with, and the fix for each.
- How to Design Authorization for Your App (So Users Can't Reach Each Other's Data) Ownership, roles, tenants, and admin access — how to design authorization that lives in the query, denies by default, and survives the endpoint someone forgets to protect.
- What Are the Different Types of Authentication (and What Is Each One For)? Passwords, one-time codes, passkeys, magic links, social sign-in, SSO, certificates, and API keys — how each authentication type works, what it's for, and where it's weak.
- What Is Kubernetes RBAC (and What Did Your AI Grant Away)? RBAC decides which identities can perform which actions on which resources. Generated manifests routinely over-permission service accounts, and the fix is scoping.
- How to Sandbox an AI Coding Agent Run a coding agent with limited filesystem access, no ambient credentials, and restricted network egress — without making the workflow unusable.
- The Kubernetes Security Checklist for AI-Built Clusters A default cluster trusts everything inside it. Work through the identity, network, workload, secrets, and image checks your AI's manifests left at their permissive defaults.
- Kubernetes Pod Security: Why Your AI's Container Runs as Root Generated manifests leave containers running as root with default capabilities and a writable filesystem. Pod security settings close that gap, starting with securityContext.
- How to Add HTTPS to a Static Site Add HTTPS to any static site with Let's Encrypt and certbot, or skip it entirely by using a managed host. Steps for both paths.
- Are Kubernetes Secrets Actually Secret? A Kubernetes Secret is base64-encoded, not encrypted, and readable by anyone with get on Secrets. Learn what it does and does not protect, and how to harden it.
- What Is a Kubernetes Network Policy? By default every pod can reach every other pod. A network policy restricts that traffic to explicit flows, containing a compromise instead of letting it spread.