We're releasing Orca-Sonar — a fast, multilingual model (German + English) that sorts text into 7 topic classes. It's part of the Patronus Protect stack and routes incoming content by topic and sensitivity before it reaches an LLM, a DLP gate, or a storage tier.

A new research paper shows how AI agents can turn traditional computer worms into adaptive, self-replicating attack systems. Instead of following a fixed exploit chain, these worms can reason, use tools, learn from failed attempts, and spread across networks by using compromised compute. This shift makes AI runtime security essential — and shows why Patronus Protect is built for the next generation of AI-driven malware.

Article 15 of the EU AI Act becomes binding on August 2, 2026. Penalties hit 15M EUR. Here is what the law requires and how to check your gaps.

How modern AI traffic increasingly moves beyond simple JSON APIs into WebSockets, SSE, gRPC, Protobuf and binary streaming protocols — and how Patronus transparently detects and analyzes AI interactions across these transport and encoding layers while intentionally separating AI detection from semantic extraction.

Your IAM was built for humans. Your DLP was built for clicks. Your audit log was built for human-pace actions. Agentic AI breaks all three. In 2026, 88% of enterprises had AI-agent incidents. Here is what changed and what real agent-aware security has to do.

Your CASB sees the SaaS. Your DLP sees encrypted bytes. Your firewall sees a destination. None of them see Shadow AI: prompts pasted into ChatGPT, coding agents calling internal Jira, browser extensions reading confidential docs. Here is why the stack is blind, and what fixes it.

MCP turns LLM clients into orchestrators that read Gmail, write to Jira, execute shell commands. The average dev laptop now runs three to eight MCP servers, most installed without IT approval. No traditional security tool can see them. Here is the attack surface and what fixes it.

Most AI security tools route every prompt through the vendor's cloud to inspect it. You added a tool to reduce data exposure and ended up with two cloud companies holding your prompts instead of one. Here is what that costs and what the alternative looks like.

A lightweight open model for prompt-injection detection that learns attack structure and enables fast, on-device AI security.