#security
9 posts with this tag.
-
The Outbound Guard: Preventing AI Agents from Leaking Sensitive Data
// · 5 min readHow AgenticMail's outbound guard module uses 30+ detection rules across 5 categories to stop AI agents from accidentally leaking sensitive information through email.
-
Building a Spam Filter That Protects AI Agents from Prompt Injection
// · 5 min readHow AgenticMail's spam filter uses 40+ rules across 9 categories to protect AI agents from prompt injection, social engineering, and data exfiltration attempts.
-
Defending Against Invisible Unicode Attacks in Agent Email
// · 4 min readHow AgenticMail's sanitizer strips invisible Unicode, hidden HTML elements, and other steganographic techniques that attackers use to smuggle instructions past AI agents.
-
Constant Time Authentication and Why It Matters
// · 5 min readHow AgenticMail uses SHA-256 hashing and timingSafeEqual for API key verification, plus a two tier key system for admin and scoped agent access.
-
Data Loss Prevention for AI Agents: 53 Rules Across 7 Categories
// · 5 min readBuilding a DLP engine for Enterprise that scans agent communications in real time with 53 pre-built rules across PII, credentials, financial data, HIPAA, GDPR, intellectual property, and agent safety.
-
Secure Vault: Encrypted Credential Storage for AI Agents
// · 5 min readEncrypted credential storage with org scoped namespacing and automatic resolution through the tool adapter pattern.
-
Domain Lock: Cryptographic Deployment Protection
// · 4 min read256 bit deployment keys, DNS TXT verification, and offline operation. How AgenticMail Enterprise prevents unauthorized deployment duplication.
-
The Nine Layer Middleware Stack: Securing an Agent API
// · 5 min readA Hono API server with 9 middleware layers: request ID, transport encryption, security headers, CORS, rate limiting, IP firewall, audit logging, RBAC, and org scoping.
-
Defense in Depth: Client Side and Server Side Outbound Scanning
// · 5 min readWhy AgenticMail scans outbound email at two layers: 35 regex patterns in the MCP client and a blocking guard in the API server.