9 stories
More than 100 security vendors now plug into the Claude Compliance API. Here's what it teaches any AI product selling to enterprises about audit logs: what to record, who can export it and where it goes.
A new study found that coding agents in seven of eight popular harnesses deleted their own session traces when asked. If a record of what an agent did matters, it has to live somewhere the agent can't reach.
Microsoft says the actor behind JADEPUFFER, the first documented agentic ransomware operation, used two compromised Azure service principals to map a tenant and then delete storage accounts, a Key Vault, and app resources in about seven minutes.
Cloudflare, Okta, Auth0 and Microsoft all offer MCP gateways now. A side-by-side comparison of where each one sits, how it handles auth and logging, and what your MCP server still needs to do.
A practical, testable list of controls for letting AI agents act on your users' data without handing them the keys.
A year ago, two competing IETF drafts were racing to define how SCIM represents AI agents. Here's what changed, and why the companies behind them are now writing one draft together.
Two critical vulnerabilities, one root cause, and the piece of MCP that is supposed to close this gap.
Design AI agent authorization policies with fixed rules and runtime checks. See how Airlock handles allowed operations, sensitive content, and human approval.
What is WorkOS Airlock? See how intent-based access control governs AI agent calls, where Pipes fits, and how the email demo turns policy into action.
Showing 9 of 9 stories
You're all caught up.
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news from WorkOS Blog
Join 15,000+ AI enthusiasts
