Rune Journal
Research, threat reports, and engineering posts from the team. Written for the developers actually shipping AI agents, not for a buyer's committee.
Secure a Python AI agent from scratch with input validation, output scanning, tool call policies, PII detection, and runtime monitoring. Working code for LangChain, OpenAI, Anthropic, and MCP.
By Declan Paul
Read articleMap SOC 2 Trust Service Criteria to concrete runtime security controls for AI agents. Covers CC6.1 access controls, CC7.1 audit trails, CC7.2 monitoring, and CC7.3 incident detection.
By Declan Paul
512 vulnerabilities, 1000+ malicious ClawHub skills, and 21,639 exposed instances. A deep dive into OpenClaw's security crisis and how to protect your agent.
By Declan Paul
Add runtime security to any Python AI agent without touching your agent logic. Install, wrap, deploy — in under 10 minutes.
By Declan Paul
A step-by-step case study of a prompt injection attack on a production AI agent. How it happens, what goes wrong, and how runtime security stops it.
By Declan Paul
An 8-point security checklist for teams shipping AI agents from prototype to production. Input scanning, output scanning, tool access, monitoring, policies, and more.
By Declan Paul
Step-by-step tutorial: add runtime security scanning to your LangChain agent with Rune. Detect prompt injection, block data exfiltration, and enforce policies.
By Declan Paul
A 10-point security checklist for startup teams deploying AI agents to production. Covers tool access, input scanning, monitoring, policies, and compliance.
By Declan Paul
Prompt injections in 1 out of 7 sessions. Data exfiltration attempts in 9%. Overly permissive tool access everywhere. A deep look at real threats facing AI agents in production.
By Declan Paul