AI
How to block destructive commands in Claude Code
Block rm -rf and other destructive Claude Code commands with Bash deny rules, a PreToolUse hook and managed settings. Learn where each layer stops and fails.
5 min read
Founder & VP Product, Nirmata
Ritesh Patel
Ritesh Patel is a founder of Nirmata and leads its products. He writes about governing AI coding agents, MCP security and Kubernetes policy as code.
276 posts · Page 5 of 23
AI
Who Controls Your AI Agents? Jim Bugwadia on Policy as Code for AI Governance
Jim Bugwadia explains how to govern AI agents with policy as code: decouple rules from apps, enforce every LLM, MCP and agent call, and keep developers moving.
4 min read
Kyverno
How to Secure VMware vSphere Kubernetes Service (VKS) with Kyverno
Secure VMware VKS clusters with Kyverno: enforce Pod Security Standards, RBAC and image signing at admission, deploy policies with Argo CD, scan for drift.
3 min read
Kyverno
How Razorpay Automates RBI Compliance on Kubernetes with Kyverno
Razorpay meets RBI Payment Aggregator rules on 7,000+ Kubernetes nodes with Kyverno policy as code: checks in CI, at admission and in scans, with live evidence.
5 min read
Kyverno
How Chase UK Made Kubernetes Audit-Ready with Kyverno Policy as Code
Chase UK replaced manual Kubernetes audits with Kyverno: 46 policies on 50 clusters, one Grafana compliance dashboard, under 20 ms admission latency.
6 min read
Kyverno
Kyverno Runs Your Admission Control. Is It Actually Hardened?
To harden Kyverno, make its webhooks fail closed, enforce image verification, sign policy bundles and lock down policy RBAC. Start with the new hardening guide.
7 min read
AI
Okta Cross App Access (XAA / ID-JAG) in Nirmata AIControls: standards-based authorization for AI agents
AIControls now performs the ID-JAG token exchanges on your agents' behalf — so agents need no protocol code — and policy-checks, budgets, and attributes every delegated…
7 min read
AI
The AI Gateway Buyer’s Guide: Beyond Routing and Tool Visibility
Over the past year, nearly every engineering org I talk to has reached the same milestone: AI agents are no longer a demo. They're calling real tools, against real…
9 min read
AI
Zero Trust Has a Blind Spot, and AI Agents Just Drove Through It
Last week, two frontier AI models escalated privileges inside a sanctioned test environment, moved laterally until they found a node with internet access, and reached…
9 min read
AI
Before You Deploy AIControls
An AI governance strategy is a portfolio, not a purchase. No AI governance tool covers everything today, including this one. Governing models, developers, autonomous…
8 min read
AI
Govern the Request, Not Just the Model
What we heard from teams already using AI gateways — and what it still didn't answer. Talking to platform and engineering teams putting AI into production, we kept…
5 min read
AI
The Gate That’s Missing from Every AI Governance Stack
This is the third in a three-part series on the AI Governance market. Part 1: Understanding AI Governance: A Market Map. Part 2: The Cloud Security Playbook for AI…
8 min read