Runtime-Security

Rein Security Launches $25M Runtime Guard for AI Agents

FIRST LOOK ATLAS OWASP MEDIUM ▲ 7.2 SecurityWeek Oct 08, 2026

Rein Security has raised $25 million to build runtime security controls for AI agents, targeting the largely unaddressed gap of monitoring and constraining agentic AI behaviour as it executes in production. This closes a meaningful defender blind spot: most existing security tooling was designed for static software and cannot observe or intervene in the dynamic, multi-step decision chains that AI agents produce. Residual gaps remain around what specific runtime signals Rein captures, how the platform integrates with diverse agent orchestration frameworks, and whether coverage extends to multi-agent pipelines.

Kontext Security Launches AI Agent Runtime Enforcement Platform

FIRST LOOK ATLAS OWASP MEDIUM ▲ 7.2 SecurityWeek Sep 25, 2026

Kontext Security has emerged from stealth with $4 million in funding and a runtime enforcement platform that evaluates AI agent actions in real time, providing visibility and control over what agents do during execution. This directly addresses one of the most pressing gaps in agentic AI security: the absence of continuous, in-flight oversight of agent behaviour beyond static policy definitions. The platform's maturity and integration breadth across diverse agent frameworks and enterprise environments will determine how broadly defenders can realise its promise.

AWS AgentCore Harness Ships Built-In Shell and Identity Vault Tools

FIRST LOOK ATLAS OWASP HIGH ▲ 7.8 Palo Alto Unit 42 Sep 18, 2026

Unit 42 researchers have published a detailed analysis of AWS AgentCore Harness's default configuration, specifically how its built-in shell tool and AgentCore Identity credential vault interact at runtime when credentials are resolved to plaintext. The research closes a visibility gap for defenders by providing concrete, operationally grounded guidance on scoping allowedTools, applying least-privilege to Identity vault service accounts, and monitoring outbound traffic from harness containers. What remains is an organisational maturity question: operators must actively opt into these controls rather than relying on secure defaults, meaning the benefit is fully realised only by teams with the awareness and tooling to enforce runtime scoping.

OpenLeash Adds Human-in-the-Loop Checks for Risky AI Agent Actions

FIRST LOOK ATLAS OWASP MEDIUM ▲ 7.2 SecurityWeek Sep 03, 2026

OpenLeash has released a security tool that intercepts potentially dangerous AI agent actions in real time, automatically blocking clear threats and escalating ambiguous actions to a human reviewer for approval. This directly closes the excessive-agency gap — one of the most pressing risks in agentic AI deployments — by inserting a verifiable human control point before consequential actions execute. Residual maturity questions remain around policy definition, latency tolerance in high-throughput agent workflows, and integration breadth across diverse agent frameworks.

Brex CrabTrap: LLM Proxy Blocks Agentic AI Prompt Injection

ATLAS OWASP MEDIUM ▲ 7.2 HN AI Security Apr 22, 2026

Brex has open-sourced CrabTrap, an HTTP proxy that uses an LLM-as-a-judge architecture to intercept, evaluate, and block or allow requests made by AI agents in real time against configurable policies. The tool targets a critical gap in agentic AI deployments — the lack of runtime guardrails for autonomous agent actions — and represents a practical defensive control against excessive agency and prompt injection exploitation. Its production-oriented design positions it as a notable contribution to the emerging agentic AI security toolchain.

AI Agent Prompt Injection and Data Leakage Threats Rise

ATLAS OWASP MEDIUM ▲ 6.5 SecurityWeek Apr 16, 2026

Capsule Security, an Israeli startup, has emerged from stealth with $7 million in seed funding focused on runtime security for AI agents, continuously monitoring their behaviour to detect and prevent unsafe or malicious actions. This positions the company within the rapidly growing agentic AI security space, where autonomous agents executing actions on behalf of users represent a significant and underexplored attack surface. The funding signals growing investor recognition of the risks posed by unmonitored AI agent behaviour, including prompt injection, excessive agency, and unintended tool use.