The Sky View

    Insights, trends, and best practices in cybersecurity and AI from the Skyrelis team.

    2026-11-04 • By Skyrelis

    What Your Buyer's Security Questionnaire Is Actually Asking About Your Agents

    Six AI agent questions enterprise security reviews now ask, and the evidence that answers each: action logs, tenant isolation, approvals and more.

    Read More →
    What Your Buyer's Security Questionnaire Is Actually Asking About Your Agents
    2026-10-27 • By David Ginsburg

    Your Agent Read the Policy. It Doesn't Have to Follow It.

    System prompts can't enforce what an AI agent does with live credentials. Learn how deterministic runtime checks stop risky tool and API calls.

    Read More →
    Your Agent Read the Policy. It Doesn't Have to Follow It.
    2026-10-20 • By David Ginsburg

    UK ICO Opens a Call for Evidence on AI Agents: What Data-Protection Teams Should Prepare

    The UK ICO's call for evidence on AI agents closes November 20, 2026. Why agents raise different data-protection questions than chatbots, five questions to be ready for, and a checklist for the next five weeks.

    Read More →
    UK ICO Opens a Call for Evidence on AI Agents: What Data-Protection Teams Should Prepare
    2026-10-06 • By David Ginsburg

    McKinsey's Technology Trends Outlook 2026: The Agentic Boom Has an Infrastructure Problem, and It's the One Skyrelis Solves

    McKinsey’s 2026 outlook reveals investment racing ahead of governance, scarce orchestration talent, and a 52-point gap between AI adoption and value capture. Here’s why runtime action control is the missing layer.

    Read More →
    McKinsey's Technology Trends Outlook 2026: The Agentic Boom Has an Infrastructure Problem, and It's the One Skyrelis Solves
    2026-09-22 • By Jaz Lin

    Skyrelis Joins NVIDIA Inception

    Skyrelis has been accepted into NVIDIA Inception, NVIDIA's global startup program for companies building on AI, accelerated computing, and data science. Here's why that matters for agentic AI security.

    Read More →
    Skyrelis Joins NVIDIA Inception
    2026-09-17 • By Jaz Lin

    AI Agent Guardrails Are Not Enough: Enterprise Security Needs an Enforcement Layer

    Telling an agent where the boundary should be is not the same as building a boundary it cannot cross. OpenAI's rogue agents, METR's 44 documented incidents, and new OWASP and EU AI Act requirements all point to the same conclusion: enforcement has to happen independently, at the moment of action.

    Read More →
    AI Agent Guardrails Are Not Enough: Enterprise Security Needs an Enforcement Layer
    2026-09-15 • By Jaz Lin

    Skyrelis + Empromptu: Trusted Agentic AI for Healthcare and Regulated SaaS

    The CMS Rural Health Transformation Program is putting $50 billion behind AI in rural healthcare — and security review is the wall every vendor hits. Today we're partnering with Empromptu AI to close that gap with independent runtime controls.

    Read More →
    Skyrelis + Empromptu: Trusted Agentic AI for Healthcare and Regulated SaaS
    2026-09-01 • By Dave Ginsburg

    AI Literacy Just Became a Market-Access Requirement

    EU AI Act Article 4 has been in force since February 2025, and it binds both providers and deployers. Agentic AI raises the bar: proving "sufficient literacy" about systems that act autonomously takes runtime evidence, not an annual training deck.

    Read More →
    AI Literacy Just Became a Market-Access Requirement
    2026-08-27 • By Dave Ginsburg

    State-Sponsored Hackers Are Already Using Open-Source AI Agents — What Black Hat's Taiwan Research Found

    Black Hat researchers tied near-autonomous intrusions against Taiwanese government and energy targets to open-source agent frameworks — the same tooling enterprises are deploying to automate their own work. Same gap, both directions.

    Read More →
    State-Sponsored Hackers Are Already Using Open-Source AI Agents — What Black Hat's Taiwan Research Found
    2026-08-24 • By Jaz Lin

    When the Boundary Doesn't Hold

    OpenAI, Anthropic, and Meta all reported models crossing containment boundaries during controlled testing. The lesson isn't better prompts — it's knowing which boundaries are too important to let the agent decide, and enforcing those outside the agentic application.

    Read More →
    When the Boundary Doesn't Hold
    2026-07-28 • By Dave Ginsburg

    From Framework to Runtime: What AWS's Agentic AI Scoping Matrix Means for the Skyrelis Strategy

    AWS has given the industry a shared vocabulary for agent agency and autonomy. Here's how the four scopes and six security dimensions map onto runtime enforcement — and why governance has to live at runtime, not in a developer's SDK.

    Read More →
    From Framework to Runtime: What AWS's Agentic AI Scoping Matrix Means for the Skyrelis Strategy
    2026-06-30 • By Dave Ginsburg

    The AI AGENT Act Will Mandate AI Security Policies — Is Your Enterprise Ready?

    Senator Warner's discussion draft would move enterprise AI security from best practice to legal obligation. Here's what the bill requires, why policy documents won't be enough, and how to get ahead of enforcement.

    Read More →
    The AI AGENT Act Will Mandate AI Security Policies — Is Your Enterprise Ready?
    2026-06-22 • By Dave Ginsburg

    Gartner Just Named Agentic AI Oversight the #1 Cybersecurity Trend of 2026.

    It wasn't ransomware. It wasn't cloud. The category at the top of Gartner's 2026 list is agentic AI oversight — and the 17× spend gap and 8:1 governance gap should change your security roadmap right now.

    Read More →
    Gartner Just Named Agentic AI Oversight the #1 Cybersecurity Trend of 2026.
    2026-06-15 • By Dave Ginsburg

    82% of Companies Run AI Agents. Only 28% Have Security Policies.

    The governance gap isn't theoretical. It's already inside your production environment — and it widens every time you deploy a new agent.

    Read More →
    82% of Companies Run AI Agents. Only 28% Have Security Policies.
    2026-04-14 • By Jaz Lin

    Not All AI Agents Are Built the Same: A Field Guide to Enterprise Readiness

    A practical framework for understanding AI agent types, enterprise readiness, and runtime governance. Before we ask if an agent is "secure," we have to stop treating "AI Agent" as they are all the same.

    Read More →
    Not All AI Agents Are Built the Same: A Field Guide to Enterprise Readiness
    2026-04-08 • By David Ginsburg

    NIST Just Put a Spotlight on the Real Agentic AI Security Problem

    Agents can move data, money, and decisions in seconds. Governance must keep up. Why NIST's latest signals on post-deployment monitoring and smart standards matter for agentic AI security.

    Read More →
    NIST Just Put a Spotlight on the Real Agentic AI Security Problem
    2026-03-03 • By Jaz Lin

    Beyond the SaaSpocalypse: Why the Agentic Era Demands a New Security Infrastructure

    The SaaS model may be under pressure, but the real story is bigger: autonomous agents are here, and they require a new control plane for security and governance.

    Read More →
    Beyond the SaaSpocalypse: Why the Agentic Era Demands a New Security Infrastructure
    2026-02-17 • By Jaz Lin

    The OpenClaw Hangover: Why Your AI Agent Isn't Actually You

    Following the Wrong General. The agent has your Identity, but it doesn't have the Intent to know it's being manipulated by a malicious email or plugin. It's the classic "Confused Deputy" problem, just at machine speed. I break down the Lethal Trifecta of agent risk, why Identity is not Intent, and the new playbook for Intent Governance.

    Read More →
    The OpenClaw Hangover: Why Your AI Agent Isn't Actually You
    2026-02-05 • By David Ginsburg

    AI Agents Meet the Industrial IoT: A New Frontier for Risk and Governance

    I describe how AI agents integrate with IoT/industrial systems, the unique security threats this introduces, and why governance frameworks must evolve to match this paradigm.

    Read More →
    AI Agents Meet the Industrial IoT: A New Frontier for Risk and Governance
    2026-01-27 • By Den JonesGuest Blog

    Shadow AI Is the New Shadow IT: How Enterprises Can Embrace AI Without Losing Control

    "Where is AI being used in our business — and what data is going into it?" The hard truth: many enterprises are adopting AI faster than they can secure it — and they often don't have the visibility needed to confidently answer a simple question.

    Read More →
    Shadow AI Is the New Shadow IT: How Enterprises Can Embrace AI Without Losing Control
    2026-01-14 • By David Ginsburg

    The Rise of Agentic AI, and Why Security Must Move to Runtime

    A look at the types of agents, their risks, and the advantages of a runtime policy layer.

    Read More →
    The Rise of Agentic AI, and Why Security Must Move to Runtime
    2025-12-16 • By Jaz Lin

    Cutting Through the Noise: Why Complexity Is the Real AI Security Risk

    A few repeatable patterns drive the majority of AI risk exposure — and tackling them delivers real security ROI.

    Read More →
    Cutting Through the Noise: Why Complexity Is the Real AI Security Risk
    2025-12-02 • By David Ginsburg

    Agentic AI Is Ready to Transform the Enterprise — But It Can't Scale Without Security

    Enterprises aren't waiting for agentic AI. They're waiting for a way to trust it. Agents Are Exploding in Interest — But Stuck in the Shallow End.

    Read More →
    Agentic AI Is Ready to Transform the Enterprise — But It Can't Scale Without Security
    2025-10-30 • By Jaz Lin

    Developers Aren't CISOs — and That's Why AI Needs Agentic Security Infrastructure

    Why app-level security isn't enough for autonomous AI — and how runtime policy infrastructure bridges the gap.

    Read More →
    Developers Aren't CISOs — and That's Why AI Needs Agentic Security Infrastructure
    2025-09-21 • By Jaz Lin

    From Guardrails to Growth: The ROI of Agentic Policy Enforcement

    Exploring how proper policy enforcement in agentic AI systems transforms from a cost center to a growth driver, with quantifiable ROI metrics that demonstrate the business value of secure AI agent deployment.

    Read More →
    From Guardrails to Growth: The ROI of Agentic Policy Enforcement
    2025-08-26 • By Jaz Lin

    Security Without Traffic Lights: Why Agentic AI Needs Runtime Enforcement

    If your enforcement depends on SDK calls, it's not enforcement - it's guidance. Exploring why traditional security models fail for agentic AI and the critical need for runtime enforcement mechanisms that can actually control autonomous AI behavior.

    Read More →
    Security Without Traffic Lights: Why Agentic AI Needs Runtime Enforcement
    2025-08-18 • By David Ginsburg

    Agents on the Loose? Why Securing AI Isn't Optional Anymore

    AI agents have evolved from fringe concepts to foundational enterprise technology. These goal-directed, decision-making systems can take autonomous action, introducing new security challenges that require a comprehensive approach to Agentic Security.

    Read More →
    Agents on the Loose? Why Securing AI Isn't Optional Anymore
    2025-07-30 • By Jaz Lin

    What Kind of Security Does Agentic AI Really Need?

    Exploring the unique security challenges and requirements for agentic AI systems, examining how traditional security models need to evolve for autonomous AI agents and the critical considerations for enterprise deployment.

    Read More →
    What Kind of Security Does Agentic AI Really Need?
    2025-07-25 • By Jaz Lin

    Four Quadrants of AI: Why Security Will Define Winners in Agentic Era

    Exploring the four critical quadrants that define AI success and why security considerations will ultimately determine which organizations thrive in the agentic AI era.

    Read More →
    Four Quadrants of AI: Why Security Will Define Winners in Agentic Era
    2025-07-14 • By Jaz Lin

    Security in the Age of AI: Building Fast, Building Safe

    Laying the Foundation for AI-Ready Infrastructure. This final installment explores the foundational layers for AI adoption, focusing on security as an enabler rather than a barrier in the AI era.

    Read More →
    Security in the Age of AI: Building Fast, Building Safe
    2025-05-28 • By Jaz Lin

    Scaling Agentic AI Securely in the Age of Shadow AI

    Visibility, policy control, and IT alignment — what it really takes to deploy autonomous agents securely and at scale in the enterprise environment.

    Read More →
    Scaling Agentic AI Securely in the Age of Shadow AI
    2025-04-02 • By Keita Broadwater

    When Your AI Gets Tricked: The Hidden Vulnerability of Agent Injection

    Exploring the emerging security threat of agent injection attacks and how malicious actors can manipulate AI agents through carefully crafted prompts, potentially compromising enterprise systems and data security.

    Read More →
    When Your AI Gets Tricked: The Hidden Vulnerability of Agent Injection
    2025-03-15 • By Jaz Lin

    Is Your Network Ready for AI? Building the Backbone for AI-Driven Innovation

    Laying the Foundations for AI-Ready Infrastructure. Exploring how AI's unique traits are reshaping network infrastructure demands, from massive data volumes and low latency requirements to multi-cloud ecosystems and API proliferation.

    Read More →
    Is Your Network Ready for AI? Building the Backbone for AI-Driven Innovation
    2025-02-25 • By Jaz Lin

    Data Without Borders: Breaking Silos for AI Readiness

    Laying the Foundation for AI-Ready Infrastructure. Exploring the core infrastructure elements needed to scale AI effectively, bridging the gap between AI vision and readiness in enterprise environments.

    Read More →
    Data Without Borders: Breaking Silos for AI Readiness
    2025-02-18 • By Jaz Lin

    Four Roles in AI: Consumer, Creator, Provider, or Enabler — Which One Are You?

    Laying the Foundation for AI-Ready Infrastructure. Exploring the four distinct roles organizations and individuals can play in the AI ecosystem and how to identify which role best fits your current position and strategic goals.

    Read More →
    Four Roles in AI: Consumer, Creator, Provider, or Enabler — Which One Are You?