Patronus

AI Security Insights

Agent Security

Coding agents, MCP servers and autonomous tool calls: how agents get hijacked and what stops them before execution.

9 articles

PDF Prompt Injection: Scan Before RAG and Agents

A PDF can contain instructions aimed at an AI. Understand the role of extraction, RAG and the controls around document processing and agent actions.

Agent Security · Oct 7, 2026 · 5 min · Read →

Manus Prompt Injection: Warning After Code Execution

The Manus attack triggered a warning after code execution. What that means for input screening, tool approvals and limited permissions in your AI agents.

Agent Security · Oct 6, 2026 · 5 min · Read →

Scan an MCP server before connecting your AI agent

An MCP server supplies the tool names, descriptions, and schemas an agent reads. Inspect that metadata before the server joins the agent's tool catalog.

Agent Security · Sep 24, 2026 · 6 min · Read →

Introducing the Patronus Scanner API: check prompts, documents and MCP servers with one call

The same detection that runs on the device in Patronus Protect is now an API: one endpoint for text, URLs, files and MCP servers, returning a verdict, evidence spans and confidence. 100 scan units a day without an account, then free with an API key.

Agent Security · Sep 19, 2026 · 7 min · Read →

Safety before speed: what Altman, Amodei and Musk are now calling for

Three of the best-known figures in AI agree on one thing: model capabilities must not outrun our ability to control them safely. For companies, this is a debate about securing agents.

Agent Security · Sep 14, 2026 · 6 min · Read →

What is prompt injection? Definition, examples and defenses

Prompt injection has topped the OWASP list for LLM applications for years. With agents that read web pages and execute tools, a chat trick has turned into an attack on company data.

Agent Security · Sep 7, 2026 · 9 min · Read →

Securing AI Coding Agents: What GhostApproval, Ghostjacking and CVE-2026-62830 Have in Common

Three security incidents in six weeks, three different vendors, one shared pattern: there is a gap between what an AI agent actually does and what a human gets to see. That gap is where attackers operate.

Agent Security · Aug 24, 2026 · 9 min · Read →

Agentic AI Broke Your Security Model

Your IAM was built for humans. Your DLP was built for clicks. Your audit log was built for human-pace actions. Agentic AI breaks all three. In 2026, 88% of enterprises had AI-agent incidents. Here is what changed and what real agent-aware security has to do.

Agent Security · May 9, 2026 · 11 min · Read →

MCP the new attack surface

MCP turns LLM clients into orchestrators that read Gmail, write to Jira, execute shell commands. The average dev laptop now runs three to eight MCP servers, most installed without IT approval. No traditional security tool can see them. Here is the attack surface and what fixes it.

Agent Security · Apr 22, 2026 · 8 min · Read →

Try Patronus on your own computer.

Pick a case in the live demo and see straight away what reaches the provider.

Go to releaseContact

Reports and newsletter →