# Topic
10 articles on this subject.
When an agent acts on behalf of a user it inherits that user's access, so your half-governed pile of human permissions becomes agent attack surface. Why agent blast radius starts upstream, with people, and how to right-size both sides of the identity ledger.
Every Microsoft Graph, Entra SDK and Agent 365 SDK call needed to give a containerized LangChain agent its own identity, access control and audit trail, in the order they have to be made, and why.
The AWS, Microsoft Graph, Entra SDK and Agent 365 SDK calls that give an agent on Amazon ECS and Amazon Bedrock a Microsoft Entra identity, access control and an audit trail in Purview and Defender, in the order they have to be made, and why.
Buried in a Microsoft Graph reference is a list of permissions that cannot be granted to an AI agent identity at all. Read backwards, it's the first enforced authority model for agents — six prohibitions worth applying to every agent platform you run, not just Entra.
A practical identity architecture guide for security, governance, and troubleshooting
These applications fall into two distinct layers — each requiring different red teaming, and both are required.
A visual blueprint of MDASH — Microsoft's Multi-Model Agentic Scanning Harness — an autonomous system that discovers, validates, and proves software vulnerabilities at AI speed. The system, not the model, is the product.
AI red teaming has emerged as a foundational security control for organizations deploying artificial intelligence — analogous to penetration testing for traditional applications, but distinct in scope, technique, and risk profile. Unlike standard security assessments, AI red teaming…
As enterprises move from AI pilots to agentic systems that act on their behalf, identity becomes the control plane. Here is how I think about securing AI agents with the same rigor we apply to human and workload identities.
Security Operations Centers are drowning in alerts while the metrics that matter — mean time to detect and respond — barely move. Here is how AI-driven automation and analytics change the operational math.