AI
Prompt injection defense for agents: what actually works
Prompt injection defense for agents that holds: deny rules, hooks that exit 2, sandboxed shell and MCP approval, each with the limits its docs spell out.
7 min read
Category
Engineering
129 posts
AI
MCP gateway vs policy enforcement: what's the difference?
An MCP gateway routes and logs tool traffic. Policy enforcement decides allow, deny or hold on each call. Here is how they differ and which one can stop a call.
6 min read
AI
Okta Cross App Access (XAA / ID-JAG) in Nirmata AIControls: standards-based authorization for AI agents
AIControls now performs the ID-JAG token exchanges on your agents' behalf — so agents need no protocol code — and policy-checks, budgets, and attributes every delegated…
7 min read
Engineering
The AI Innovation-Security Paradox
Nirmata's AI Controls provides real-time governance, policy enforcement and risk management, bridging the gap between engineering and security leaders.
4 min read
AI
The AI Gateway Buyer’s Guide: Beyond Routing and Tool Visibility
Over the past year, nearly every engineering org I talk to has reached the same milestone: AI agents are no longer a demo. They're calling real tools, against real…
9 min read
Engineering
Critical Kyverno Vulnerability — CVE-2026-54523
CVE-2026-54523 (CVSS 9.6) lets a Kyverno NamespacedMutatingPolicy create resources in any namespace. Kyverno 1.18.0 and 1.18.1 are affected; upgrade to 1.18.2.
3 min read
AI
Govern the Request, Not Just the Model
What we heard from teams already using AI gateways — and what it still didn't answer. Talking to platform and engineering teams putting AI into production, we kept…
5 min read
AI
Tokenomics: From Tokenmaxxing to Valuemaxxing
Uber burned through its entire 2026 AI budget in four months. An AI consultant's client spent $500 million in a single month because no one set usage limits on Claude…
5 min read
Engineering
Policy-Driven Authorization for AI Agents with Kyverno and AWS AgentCore
Enforcing real-time, payload-aware governance for the agentic era Introduction: From Generation to Action AI agents are no longer just generating responses, they're…
3 min read
AI
AI Bots Are Now Exploiting Your Automation — And Kubernetes Is Next
An autonomous AI agent compromised 5 open source repos in 7 days. Here's what it means for your Kubernetes security posture.
9 min read
Engineering
AI, Open Source, and the Human Bottleneck
Generative AI is accelerating open source contributions, but human review remains the bottleneck. Why Kyverno introduced an AI usage policy.
7 min read
Engineering
Moving Beyond Kyverno to AI Platform Engineering
Kyverno enforces Kubernetes policies, but doesn’t scale remediation or governance. Nirmata adds AI automation and centralized control.
9 min read