Agent Control Fabric
Learn why human IAM and API gateways do not compose cleanly for autonomous systems, and what a purpose-built control fabric for agents requires.
▸ RESOURCES
Resources for securing enterprise AI.
Architecture breakdowns, technical guides, research notes, and company updates from a team pushing the frontier of agent security.
Built for the people responsible for making AI safe in production, engineering, security, IT, and GRC teams. No marketing fluff.
▸ BLOG
All articles → Latest writing
-
MCP Is Now Stateless: A Guide to 2026-07-28
MCP 2026-07-28 removes the initialize handshake, sessions, and server-initiated requests. What changed at the wire level, and how to migrate a server or client.
Read the article → -
Claude Code Permissions and Auto Mode: The 44 KB Rulebook You Can't Print
How Claude Code permissions and auto mode actually work: the five gates, the classifier's consent model, the rules no approval clears, and cross-session permission laundering.
Read the article → -
Inside OpenAI's Hugging Face Breach: A Reward-Hacking Teardown
How an OpenAI model chained a zero-day to breach Hugging Face and steal a benchmark answer key, plus the isolation and identity controls that stop it.
Read the article →
▸ LEARN
All guides → Guides by topic
5 guides
Foundations
The primitives every agent-security program is built on: who an agent is, how its access is decided, and the attacks that target it.
Browse Foundations → 4 guidesControls
The defenses you put in front of agents: gateways, firewalls, server hardening, and how to choose them.
Browse Controls → 4 guidesGovernance
Oversight and accountability: discovering agents, recording what they do, and keeping it auditable.
Browse Governance → ▸ NEWSROOM
All news → Press and milestones
-
Introducing ZeroID: Open Source Identity for Autonomous Agents
Cryptographically verifiable agent identities, explicit delegation chains, and auditable authorization.
-
Highflame Partners with Tailscale to Secure AI Agents at the Network Layer
Real-time AI security evaluation at the network layer via Aperture's LLM traffic proxy, with no code changes.
-
Highflame joins the Coalition for Secure AI
Joining CoSAI to help organizations deliver AI outcomes safely, at scale.
-
Highflame Launches MCP Security to Bring Defense in Depth to the Model Context Protocol Layer
Press release announcing MCP Security at the Model Context Protocol layer.
▸ WHITE PAPERS
The technical case, in depth
Your IAM wasn’t built for agents
A technical guide to securing agent and sub-agent identity with cryptographic credentials, delegated authority, scoped access, and sender-constrained tokens.
LET'S TALK
Can't find what you need?
If you have a specific question about how Highflame works in your environment, the fastest answer comes from talking to the team.