Start here

Recommended order

  1. Prompt injection and instruction manipulation
  2. Sensitive data exposure in AI workflows
  3. Runtime guardrails and AI firewalls

10 guides

Security team guides

For Security Teams

Prompt injection and instruction manipulation

A guide stub for understanding prompt injection, instruction manipulation, and control questions for AI applications.

What is prompt injection, why does it matter, and what controls can reduce the risk?

For Security Teams

Sensitive data exposure in AI workflows

A guide stub for mapping sensitive data exposure across AI prompts, outputs, retrieval, embeddings, logs, training, and SaaS tools.

Where can sensitive data leak across prompts, outputs, retrieval, embeddings, logs, training, and SaaS AI tools?

For Security Teams

Excessive agency and tool-use risk

Learn how security teams should assess AI agent tool-use risk, permission boundaries, approval gates, logging, and control evidence.

What risks emerge when AI systems can call tools, use permissions, trigger workflows, or act through identities?

For Security Teams

Data exposure in retrieval and vector search

Learn how retrieval, embeddings, vector search, access control gaps, and source attribution can expose sensitive information in AI applications.

How can retrieval, embeddings, vector search, and access control gaps expose sensitive information?

For Security Teams

AI asset inventory and governance

Learn what security teams should include in an AI asset inventory and how it supports AI governance, risk management, and control assurance.

What should be included in an AI asset inventory and how does it support governance and control assurance?

For Security Teams

Model and data supply chain risk

Learn how security teams should assess risks across models, datasets, pipelines, registries, dependencies, third-party components, and AI deployment workflows.

What can go wrong across models, datasets, pipelines, registries, dependencies, and third-party AI components?

For Security Teams

Runtime guardrails and AI firewalls

A guide stub for understanding where runtime AI controls sit, what they inspect, and what evidence buyers should request.

Where do runtime AI controls sit, what can they inspect, and what proof should buyers ask for?

For Security Teams

AI red teaming and evaluation

Learn what AI red teaming and evaluation should prove before and after deployment, including prompt injection, data exposure, misuse, tool-use risk, and evidence.

What should AI red teaming and evaluation prove before an AI system is trusted in production?

For Security Teams

Logging, monitoring, and evidence generation for AI security

Learn what logs, alerts, reports, and audit evidence help security teams operationalize AI security across AI applications, agents, data flows, and runtime controls.

What logs, alerts, reports, and audit evidence help security teams operationalize AI security?

For Security Teams

Map AI security to OWASP, NIST, CSA, and MITRE

A guide stub for mapping AI security risks and vendor capabilities to external and internal control frameworks.

How can AI security risks and vendor capabilities be mapped to OWASP LLM Top 10, NIST AI RMF, CSA AI Controls Matrix, MITRE ATLAS, and internal control frameworks?

AI Security Vendor Map

Turn control questions into a buyer shortlist.

Join the buyer waitlist for launch updates and comparison guidance.

Join buyer waitlist