Notes on governing AI agents.
What we're learning from assessments and from teams putting agents into production.
Why Does the AI Mandate Arrive Before Identity Is Ready?
Leaders set AI dates before identity work is done, as 11 client calls showed in 2026. Start agents small with five jobs: record, owner, exit, scope, log.
By Josh Woodruff
How to Evaluate an AI Security Vendor With No Peer References
No peers have run most AI security products yet, so ask vendors for evidence: seven question categories, a proof of value, and a short contract.
By Josh Woodruff
Which Rules Apply to AI Agents in a Regulated Business?
Almost no rule names AI agents yet. That silence isn't permission. Map every agent onto a control you already report on, and keep the proof.
By Josh Woodruff
What Should a CISO Tell the Board About AI Agents?
The board wants one answer about AI agents: when one goes wrong, can you show you had control. Four things prove it: see it, stop it, trace it, prove it.
By Josh Woodruff
Why Security Teams Are Building Their Own AI Reference Architecture
No complete AI security reference architecture exists to buy. So the strongest security teams build their own and hand it to vendors as a coverage grid.
By Josh Woodruff
Before You Buy an AI Security Tool, Check What You Already Own
Most teams shopping for an AI security tool are paying for capabilities they haven't turned on. Check the stack you own before you add a line item.
By Josh Woodruff
Why Your Copilot Pilot Outruns Your Data Classification
Copilot doesn't create a data leak. It reveals the permissions you already had. Nine client calls in 2026 hit the same wall. Classification sets the tier.
By Josh Woodruff
Why Your Security Team Should Govern Its Own AI Agents First
Your security team is likely the first team running AI agents in production. Seven client calls in summer 2026 showed the same shape. Govern those agents first.
By Josh Woodruff
Where Should Deterministic Code End and the LLM Begin?
Two teams in unrelated industries drew the same line independently. The useful question isn't whether to use AI. It's which parts stay deterministic.
By Josh Woodruff
Why Does Your AI Review Board Only See Finished Work?
AI review boards fire on intake, and AI work never arrives through intake. Move the trigger earlier and register intent before any code exists.
By Josh Woodruff
Who Owns AI Governance When Four Teams Each Own a Piece?
AI governance stalls when four teams each hold a defensible piece of it. A federated model fixes that: one center owns the standard, the units execute.
By Josh Woodruff
How Does a Small Security Team Govern AI?
Extend what you already run instead of building a separate AI security program. Treat AI as a change to identity, data, software delivery, and network access.
By Josh Woodruff
What Does It Mean to Approve an AI Agent?
Security gets named as the AI agent approver without anyone defining what approval means. Five written questions beat a committee that takes months.
By Josh Woodruff
Why Single-Vendor AI Security Advice Keeps Aging Badly
Ten security teams since January 2026 described a multi-vendor AI estate. Almost none of them chose it. Advice written for one stack doesn't survive that.
By Josh Woodruff
Why AI ROI Metrics Miss the Cost of Ungoverned Agents
Popular AI ROI frameworks measure revenue, cost, speed, and adoption. None of them measure risk. That missing column is what breaks the business case.
By Josh Woodruff
What Is Data Poisoning, and How Do You Keep It Out of Your AI Agents?
Data poisoning corrupts an AI agent from the inside. The dashboards stay green while the decisions go wrong. One firm lost $100K before anyone noticed.
By Josh Woodruff
What Is Prompt Injection, and How Do You Protect AI Agents From It?
Prompt injection is social engineering for AI. Someone slips your agent hidden instructions and it obeys. One bot got talked into selling a car for $1.
By Josh Woodruff
How Do You Monitor an AI Agent's Behavior?
You can't tell a compromised agent from a busy one unless you know its normal. One pricing agent crept its margins up for six weeks before anyone caught it.
By Josh Woodruff
What is agent washing? (And how to spot fake agentic AI vendors)
Gartner says only ~130 of thousands of agentic AI vendors are real. The rest are rebadged chatbots and RPA. How to spot the fakes before your audit does.
By Josh Woodruff
What is the AI agent identity problem?
Only 18% of security leaders trust their identity systems for AI agents (Strata, May 2026). The five-element blueprint that fixes pilot purgatory.
By Josh Woodruff
Why Zero Trust Needs More for AI Agents (and How to Fix It)
Zero Trust was designed for humans logging into systems. AI agents don't log in...they act, chain decisions, and call systems continuously. Here's what to do.
By Josh Woodruff
What Is Trusted Agents? AI Agent Security for Business Leaders
Trusted Agents is a free weekly newsletter on AI agent security for business leaders. Real incidents, action plans, and Zero Trust gap analysis every Tuesday.
By Josh Woodruff
Take This Quiz Before You Spend a Dollar on Agentic AI
Before you spend money on AI, take this 10-minute readiness assessment. You’ll be happy you did.
By Josh Woodruff
Why Microsoft 365 Copilot's Hacking Shows the Need for Zero Trust
In our rush to adopt AI, we forgot everything we every learned about security. Learn how all AI agents are vulnerable and need Zero Trust security.
By Josh Woodruff
Your AI Agents Are Like Employees Who Never Talk. Here's the Fix.
It's critical to have AI agents that actually work together. The question isn't whether to adopt MCP but whether you'll do it quickly. -
By Josh Woodruff
Your AI Strategy Failed. Your Workforce Just Doubled.
Here's why most CEOs are optimizing for 5% productivity gains while their competitors are building entirely new operating models.
By Josh Woodruff
Agentic AI Starts With Your Most Annoying Processes
Don't transform your whole business with AI. Just fix that one annoying process everyone hates. Success is contagious when you start small and smart.
By Josh Woodruff
Why are 60% of corporate logins now non-human?
At RSAC 2025, a presenter showed a live dashboard of users logged into a normal company's systems. 60% were AI agents making decisions.
By Josh Woodruff
AI First, Security Always
Stop tacking security onto AI projects as an afterthought. Learn how Massive Scale's 'AI first, security always' approach works for any business size.
By Josh Woodruff