Straiker Blog

AI agents are creating a new enterprise attack surface. The Straiker Partner Collective, brings partners together to discover, test, and defend AI agents.

Heimdall is a cyber-hardened AI sandbox for high-risk agent training and evaluations, with independent controls for isolation, egress, telemetry, and shutdown.

Why input filtering fails against indirect prompt injection in AI agents, and the security controls that actually contain attacks & secure your AI agents.

See how poisoned OpenTelemetry telemetry manipulated an AI SRE agent into deploying a privileged Kubernetes container, escaping to an EKS host, and executing ransomware.

Learn how AI agent runtime security uses context to protect tool calls, MCP servers, Skills, APIs, and agent actions, securing agents before they create impact.

Security research reveals how indirect prompt injection in a malicious email caused an AI agent to hide commands, steal SSH keys, and fool its user.

Straiker has been named an OpenAI Select Partner, helping enterprises securely build, deploy, and scale AI agents with testing, runtime protection, and policy enforcement.

Learn what an AI agent kill switch is, why enterprises need one, and how Straiker can stop rogue, compromised, or unsafe AI agents in seconds.

Learn how Straiker's Agentic Kill Switch helps enterprises immediately disable compromised AI agents and reduce AI security risk.

Anthropic's Claude models escaped sandboxed tests and reached real systems 3 times. See why AI agents need a kill switch outside the lab.

Everything you need to know about the EU AI Act. Scope, prohibited practices, non-compliance fines up to €35M, and the real compliance deadlines for 2026-2028.

Discover the biggest AI security talks from Black Hat USA 2026 covering AI agents, prompt injection, LLM exploits, AI red teaming, defenses, and more.

Compare the top agentic AI security platforms for 2026 across AI agent discovery, Agent-SPM, AI red teaming tools, MCP security, AI chatbot guardrails, AI agent runtime security, and related security workflows.

Straiker secures Claude Chat, Cowork, and Code with runtime detection at 98.1 to 99 percent, full traceability, and a Skills and MCP scanner that stops indirect prompt injection. Now part of Wave 3 of the Claude Compliance API.

Thousands of real-world exploits against coding, productivity, and first-party AI agents. The data, the named threats, and the STAR Framework defenders need. Join the waitlist to read it first.

In agentic AI, the model behaves and the user is legitimate. The weapon is the context the agent reads. Here is why we built the Straiker STAR Framework to map the agentic attack surface, and how it supplements the NIST AI RMF and OWASP.

The inaugural STAR Labs report ran real exploits on AI agents. Among the findings: 91% of successful attacks on productivity agents left no trace.

Straiker threat models Emergent’s Wingman agent, showing how connected AI agents can be exploited through untrusted content, cross-connector flows, and autonomous actions.

How did Google Antigravity exfiltrate data? GhostFabric shows how an AI coding agent running Gemini 3.1 Pro exploited a cloud internal network using VXLAN.

Carl Vincent, a Straiker researcher, built Andromeda: an AI agent that writes its own red team payloads in real time. A Toorcamp 2026 prototype, now open source.

A seasoned cybersecurity revenue operator, Puthucode joins Straiker to scale global go-to-market following the company's $64M Series A.

‍Round led by Marathon with continued support from Bain Capital Ventures and Lightspeed. Trusted by Fortune 500 enterprises and Frontier AI labs, the company defends the fastest-growing workforce in the enterprise: AI agents.

Agentic security is real-time protection for AI agents—the systems that plan, call tools, and act on behalf of enterprises—delivered by Straiker’s Defend AI runtime engine and its medley-of-experts architecture, purpose-built to handle the complexity of agent behavior rather than just model safety.

What is shadow AI? Learn why shadow AI includes more than unsanctioned tools, and how security teams can govern sanctioned AI, AI-SPM, and AI agents.