Runlayer secures Meta Muse with governed deterministic policies and runtime security models that you can control. Runlayer also detects when Muse is being used within company systems without governance and alerts you.
Security teams have always relied on layered defenses, but legacy tools weren't built for AI's speed or scale. Runlayer Runtime Security catches and blocks risky behavior at runtime with AI-ready defense in depth, across every client,...
Runlayer Agents can now be defined in Terraform: the prompt, model, tools, and network access live in your repo, and every change ships through a reviewed plan.
An agent that can reach any host on the internet can leak anything it can read. Runlayer Agents now carry their own network access policy, checked on every connection the agent makes.
Most enterprises can tell you what they spend on AI. Very few can tell you what that spend produced. Runlayer AI Spend & ROI ties every AI session to the work it created, so you can...
Runlayer Sessions & Shadow AI gives security teams what they've been missing: pre-execution scanning, full session telemetry across every tool call and reasoning step, and enterprise-scale deployment that covers every endpoint from day one.
Enterprises shouldn't have to choose between shipping agents fast or knowing those agents are secure. Runlayer doesn't make you choose. Runlayer Agents are powerful, secure by design, and easy to use.
Runlayer is proud to be recognized as an AI Security Endpoint Leader in Latio's 2026 AI Security Market Report. Runlayer provides in-depth security and control of AI use on the endpoint, delivering the golden path to...
The Runlayer team spent the week at Fal.Con 2026 hearing how top security leaders are securing AI agents, and we're recapping the top takeaways here. Learn how to apply the security fundamentals to agents that move...
Runlayer is a launch partner for "Add to Slack", bringing governed agents into the place employees get work done. With Runlayer, it's easier than ever for employees to build and run agents without compromising on security.
Runlayer agents can now run on open-source models served by Baseten, frontier-class performance, on inference you control.
Meet the Runlayer team at Black Hat USA 2026 in Las Vegas, August 1–6. Book a private executive briefing at the Four Seasons or join us for Supercar Track Day at SpeedVegas on Wednesday, August 5.
We've raised a $30M Series A from Felicis and Khosla Ventures, bringing total funding to $42M, to build the golden path for AI: one platform that lets every team build agents without losing security and control.
When an agent makes the wrong call, your audit trail is the only record of what happened. Here's what most logs leave out and how to fix yours before an incident.
APM tools assume deterministic systems. AI agents break that at the client. Here's why MCP traffic defeats traditional observability, and why the real gap is reconstructing intent from a trace.
MCP's new authorization hardening RC quietly landed six spec fixes that most people glossed over. We broke them down into three problem clusters: trust domain confusion, credential lifecycle management, and authorization boundaries.
Runlayer and Anthropic collaborated on MCP Tunnels, which invert the connection direction so your network reaches out to Anthropic instead of exposing inbound ports, removing the security wall that blocks Claude from accessing internal systems like...
Senior engineers look at an MCP gateway and see a reverse proxy with auth and logs. That instinct is wrong. MCP attack vectors shift constantly, performance breaks at scale in specific ways, and threat detection requires...
MCP adoption has exploded inside enterprises, with shadow servers and over-provisioned agents creating an attack surface most security teams haven't caught up to. Traditional IAM, OAuth, and RBAC weren't built for non-deterministic agents that delegate to...
Runlayer was named to Notable Capital & Morgan Stanley's 2026 Rising in Cyber list, voted on by 150 sitting CISOs. Andy Berman on why the recognition matters, and what it signals about how AI-native companies are...
An MCP gateway acts as the centralized proxy layer for agent-to-tool communications, handling tool discovery, authentication, input/output filtering, and observability across an organization's agentic systems.
OX Security found a design-level flaw in Anthropic's Model Context Protocol. MCP's STDIO transport turns a config file into a command executor. Here's how Runlayer's control plane breaks each of the four attack vectors.
Runlayer achieves AARM Extended Conformance (R1–R9), partnering with the Vanta-backed open specification to define how enterprises secure AI agents at runtime.
What Project Glasswing and Claude Mythos mean for enterprise security teams, and why your patch workflows, dependency management, and MCP governance need to evolve now.
Fake MCP servers pose a growing security risk, enabling data leaks, tool poisoning, and compromised AI behavior. Learn how these attacks work and how organizations can prevent them with proper controls and monitoring.
Runlayer and 1Password partner to bring secure, auditable credential access to autonomous AI agents. The integration lets enterprises inject secrets from 1Password vaults into agent sessions managed by Runlayer, replacing plaintext .env files with centralized governance,...
Garry Tan recently argued that MCP “sucks,” citing context-window bloat and weak authentication. This article breaks down why those criticisms miss the mark, and why MCP remains the better foundation for agents operating at enterprise scale.
PBAC beats FGA for agent authorization, context-aware, auditable, asymmetric access control without graph complexity.
Dynamic tool use cuts token waste from MCP by replacing bulk tool loading with lightweight search, saving cost without custom implementation.
OpenAI AgentKit/Agent Builder launched in Oct 2025 but, despite early hype, its limited integrations and weak security (e.g., unverified MCP servers, no namespace isolation, insufficient guardrails) create a large enterprise attack surface, prompting calls for controls...
A Claude Opus–powered OpenClaw agent with Slack and shell access was social-engineered in ~50 messages to rebind its UI, install ngrok, expose the dashboard publicly, reveal its gateway token, and approve the attacker’s device.
An overview of the OWASP MCP Top 10, highlighting the biggest security risks in MCP-enabled AI systems and the key safeguards teams can use to prevent them.
MCP Apps let tools render interactive UIs directly in chat via the same MCP protocol, not a new execution path. With Runlayer intercepting tool calls, resource fetches, and auth headers, existing MCP security controls apply from...
Connect AI agents to Box content with enterprise security. The official Box MCP server is live in the Runlayer Catalog, with identity enforcement, audit logging, and threat detection built in. Box customers can find Runlayer in...
CLI tools feel familiar to AI agents, but they break down in production due to brittle syntax, poor state management, and dangerous security assumptions. Here’s why CLI agent workflows fail and how a single-tool MCP using...
This update is about momentum: moving faster in the CLI, getting clearer visibility into what’s running, and debugging with less friction. Expect smoother workflows, better control, and fewer surprises as you build and ship.
Two near-invisible prompt injection attacks showed how attackers can bypass default enterprise guardrails and trigger silent, ongoing data exfiltration by exploiting user and model trust. Runlayer blocks these attacks by treating every input as untrusted until...
Runlayer is an official Cursor Hooks launch partner. With Cursor Hooks, securely allow or deny MCP tool calls with Runlayer, the AI control plane for enterprise agents.
GitHub’s MCP vulnerability revealed how AI agents can be weaponized through poisoned context in public repositories. This post analyzes the exploit, explains why permissions alone aren’t enough, and shares practical guardrails for preventing and mitigating agent-driven...
The Linux Foundation has launched the Agentic Artificial Intelligence Foundation (AAIF), with Runlayer joining sponsors Anthropic, OpenAI, Google, AWS, Microsoft. AAIF now oversees the Model Context Protocol (MCP), reinforcing MCP as a rising standard for AI...
MCP adoption is accelerating across major platforms, but security risks, like malicious servers, prompt injection, and tool-level exploits, are growing just as fast. This post breaks down real attack scenarios that show how easily data can...
Over the last year, MCP has surged in adoption. To little surprise, this has introduced some scaling issues. One of these is client registration; previously, systems were rigged together by humans.
Tired of manually registering every AI agent with every OAuth server? Dynamic Client Registration (DCR) lets your agents authenticate with MCP servers at runtime, no human clicks required.