📰 Dev.to · Josh Waldrep

A working cluster ran five AI agents, each with an in-pod Pipelock sidecar scanning their traffic....

Three bypass shapes for HTTPS_PROXY-only agent egress controls. The kernel does not enforce any of...

You cannot change a security policy in production without breaking somebody's workflow somewhere....

TL;DR. Pipelock Agent Egress Control is a GitHub Action. It runs an agent script inside a Linux...

If your agent egress story is "we set HTTPS_PROXY to point at the proxy," the proxy is asking nicely....

A wire-only proxy scans wire bytes. Opaque media bytes pass through the wire layer untouched. Anyone...

When a security proxy blocks an agent's request, the agent sees a 4xx and has to guess what happened....

A Pipelock instance running in a Kubernetes cluster watched its config file for hours while four...

A correct AI agent containment model on a Linux workstation needs three Linux UIDs, not two. Two UIDs...

Two architectures keep showing up in AI agent runtime security in 2026. Both promise to stop bad...

If you run AI agents in production, you have probably been told to put them behind a domain...

Why this report exists Every vendor with an MCP security product has an opinion about MCP...

If you have spent any time reading about AI security in the last two years, you have been told to add...

Six deals announced in a handful of months. Five closed. One pending. Most of the startups on my...

The AI agent security market went from a handful of projects to a crowded field in about twelve...

Safety guardrails are supposed to be the first line of defense. The model refuses harmful requests,...