Topic

AI security

9 articles on this topic from the NullSquare blog.

AI security

MCP security: threat model, risks, and production tests

August 28, 202614 min read

MCP security: threat model, risks, and production tests

A production-focused MCP security guide that turns tool poisoning, authorization, state, token, and runtime risks into explicit security boundaries and reproducible tests.

AI security Agent security Security testing Prompt injection

AI security

Automated Penetration Testing: A Practical Buyer’s Guide

August 18, 20268 min read

Automated Penetration Testing: A Practical Buyer’s Guide

How to evaluate automated and AI penetration testing platforms by scope control, safety, evidence, coverage, retesting, and human oversight.

AI security Continuous testing Evidence Retesting

Agent security

AI agent memory needs its own security boundary

July 26, 20266 min read

AI agent memory needs its own security boundary

Persistent memory turns one hostile input into a cross-session risk. Secure the write, retrieval, action, and recovery paths as one system.

Agent security AI securityMemory poisoningPrompt injection Security testing

Compliance

Compliance tools are not all solving the same problem

July 15, 20262 min read

Compliance tools are not all solving the same problem

A practical comparison of compliance automation platforms, where NullSquare fits, and why evidence review depth matters as much as audit workflow coverage.

ComplianceGRCEvidence AI securitySecurity operations

AI security

Persona is the hidden variable in agent behavior

July 4, 20264 min read

Persona is the hidden variable in agent behavior

NullSquare open-sourced Agent Behavior Lab so teams can measure how personas, tool definitions, histories, and model families shift agent safety.

AI security Prompt injection Agent securityModel governanceSecurity testing

AI security

The annual pentest myth breaks in the glass-door era

April 18, 20261 min read

The annual pentest myth breaks in the glass-door era

When AI agents can attack and defend continuously, companies need living security evidence instead of one annual pentest report.

AI securityContinuous monitoringPentestingAttack surfaceDefensive AI

Prompt injection

Prompt injection testing has to leave the chat box

March 21, 20261 min read

Prompt injection testing has to leave the chat box

AI security testing works best when prompt injection is tested across documents, tools, memory, permissions, and real workflow boundaries.

Prompt injection AI security Agent securityScope control

AI security

AI security testing works best when it becomes a release gate

February 27, 20261 min read

AI security testing works best when it becomes a release gate

A practical model for using AI-assisted security testing before release without slowing engineering teams down.

AI securityRelease gatesSDLC

AI security

Continuous AI security testing: how the loop actually works

January 15, 20265 min read

Continuous AI security testing: how the loop actually works

Continuous AI security testing is a loop, not a faster scan. Here is what each stage has to do, and how a finding earns the right to close.

AI security Continuous testing Attack surface Evidence Retesting