https://atensecurity.com/blog Research, analysis, and engineering posts from Aten Security. en-us Thu, 25 Jun 2026 18:09:36 GMT https://atensecurity.com/blog/the-ai-agent-instrumentation-tax https://atensecurity.com/blog/the-ai-agent-instrumentation-tax Mon, 08 Jun 2026 15:11:00 GMT What happens when you stage autonomous AI agents in production pipelines? A raw, 14-day engineering post-mortem breaking down runtime telemetry mapping, active policy simulation, and the reality of the developer 'instrumentation tax'. https://atensecurity.com/blog/thoth-policy-simulation-observe-enforce-day7 https://atensecurity.com/blog/thoth-policy-simulation-observe-enforce-day7 Mon, 01 Jun 2026 16:50:00 GMT The question every security team asks before turning on enforcement: "What would this actually block?" Thoth's observe mode gives you a precise answer running your policies against real production traffic, recording what would have been blocked, without blocking anything. https://atensecurity.com/blog/unified-decision-logic-introducing-modify-and-defer-in-thoth-sdk-0-1-16 https://atensecurity.com/blog/unified-decision-logic-introducing-modify-and-defer-in-thoth-sdk-0-1-16 Fri, 15 May 2026 15:30:00 GMT The 0.1.16 release line ships MODIFY and DEFER decision types, canonicalizes observe mode, and surfaces the full ML decision envelope including feature vectors and score components in all three SDK languages. https://atensecurity.com/blog/from-guardrails-to-control-plane https://atensecurity.com/blog/from-guardrails-to-control-plane Wed, 06 May 2026 14:38:58 GMT Enterprise teams do not need another AI security console. They need a control plane that governs actions at runtime, plugs into existing systems, and produces evidence that holds up during incidents and audits. https://atensecurity.com/blog/missing-layer-agent-security-evidence https://atensecurity.com/blog/missing-layer-agent-security-evidence Thu, 16 Apr 2026 15:00:00 GMT ALLOW/BLOCK is not enough for production AI agents. Here is why evidence-first security matters: capture every action, retain rejected events, enable step-up workflows, and build audit-ready trails without slowing engineering teams. https://atensecurity.com/blog/governing-ai-agents-after-youve-said-yes https://atensecurity.com/blog/governing-ai-agents-after-youve-said-yes Wed, 01 Apr 2026 00:00:00 GMT The hardest problem in AI security isn’t stopping agents from doing bad things before you’ve authorized them. It’s stopping them from doing bad things after you have. Introducing Thoth v0.1.1 — runtime governance for AI agent tool calls. https://atensecurity.com/blog/the-action-didnt-execute-thats-the-product https://atensecurity.com/blog/the-action-didnt-execute-thats-the-product Sun, 22 Mar 2026 00:00:00 GMT An AI agent deleted 1,206 executives from a live CRM database during an active code freeze. Okta was running. LangSmith was running. Nothing stopped the DROP TABLE. That’s the problem Thoth solves. https://atensecurity.com/blog/raising-the-bar-for-secure-communications-aten-securitys-philosophy-on-trust-and-compliance https://atensecurity.com/blog/raising-the-bar-for-secure-communications-aten-securitys-philosophy-on-trust-and-compliance Fri, 20 Mar 2026 00:00:00 GMT SOC 2 Type II certified, CISA-recognized, and pursuing ISO 42001 — why Aten Security treats compliance as something you prove, not something you say. https://atensecurity.com/blog/why-we-built-aten-securitytm-a-founders-story https://atensecurity.com/blog/why-we-built-aten-securitytm-a-founders-story Fri, 20 Mar 2026 00:00:00 GMT The moment everything changed wasn’t in a boardroom. It was November 2022, watching FTX collapse. Here’s why Nyah Check built Aten Security to close the trillion-dollar blind spot in enterprise communications.