Blogs by Pavel Furman

When AI Agent Delegation Becomes Unauthorized Access

A support agent cannot export customer records. A reporting agent can. Through delegation, the restricted agent gets there anyway.

What is MCP Security?

MCP security covers the risks of the Model Context Protocol connecting AI agents to tools and data. The main threats, and how to contain them at runtime.

What is Server-Side Template Injection (SSTI)?

Server-side template injection (SSTI) lets user input run in a template engine, often escalating to RCE. How SSTI works, and how to prevent and detect it.