9 min readSatya Vegulla
MCP Server Security: The OWASP Top 10 Your Security Team Hasn't Read Yet
OWASP published the MCP Top 10: tool poisoning, prompt injection, context spoofing, zero built-in auth. If your devs use AI coding tools, read this now.
10 — critical MCP security risks identified by OWASP in 2026
MCPModel Context ProtocolOWASPAI security
8 min readSatya Vegulla
RSAC 2026: Every Vendor Wants to Govern AI Agents. Here's What's Actually Shipping.
Microsoft Purview, CrowdStrike Falcon AIDR, Cisco DefenseClaw — dozens of AI governance announcements at RSAC. We separate what ships from conference slides.
47+ — AI security products announced at RSAC 2026 in a single week
RSAC 2026AI governanceAI securityCrowdStrike
12 min readSatya Vegulla
How to Build an AI Acceptable Use Policy That Employees Actually Follow
Only 28% of companies have a formal AI policy. Here's the template: 4-tier classification, monitor-coach-enforce model, and EU AI Act alignment built in.
72% — of companies have no formal AI acceptable use policy
AI policyAI acceptable useAI governanceEU AI Act
14 min readSatya Vegulla
The CISO's Guide to Building an AI Asset Inventory (Before Auditors Ask for One)
The median enterprise runs 40+ AI tools — security knows about 12. Three discovery channels and a risk scoring framework for continuous AI inventory.
3.5x — more AI tools in use than security teams know about
AI inventoryAI asset managementshadow AI discoveryCISO