Agent Security

The MCP Attack Surface: What Security Teams Are Missing

MCP flips a traditional security assumption — the callee can influence the caller. That’s what makes it powerful, and it’s what your security team needs to understand. A practical catalog of the attack surfaces that matter, with mitigations that don’t slow teams down.

Threat Modeling MCP: 6 Trust Boundaries Your Security Team Should Map

MCP is the right bet for connecting AI agents to enterprise tools. But deploying it well means understanding the trust boundaries. I applied STRIDE to the protocol end-to-end — here’s what to focus on so your team can move fast without getting burned.