DeepKeep maps attack surface for AI agents

"Agents are inherently more difficult to protect than traditional IT tools because they can communicate with external systems and are non-deterministic. Attackers also recognize the risks and hope to exploit the autonomous nature of these agents by, for example, providing them with false prompts or misleading them into sharing sensitive data."

"DeepKeep's scanner therefore analyzes an agent's entire threat environment and produces a visual risk map. This map clearly shows connected tools and their intentions, data sources, and potential vulnerabilities. DeepKeep bases its analysis on the OWASP Top 10 for Agentic Applications, a security framework for autonomous AI systems published by OWASP in December."

"In addition to mapping risks, DeepKeep also offers runtime protection for a number of agentic frameworks. Based on observed agent behavior, the platform determines where AI firewalls and guardrails should be placed."

DeepKeep offers a free AI Agent Scanner that helps organizations identify security risks from AI agents in their environments. The tool provides visibility into agent access to sensitive systems, tools used, and software vulnerabilities. AI agents present unique security challenges because they communicate with external systems and operate non-deterministically, making them vulnerable to attacks like prompt injection and data manipulation. DeepKeep's scanner analyzes threat environments and creates visual risk maps based on OWASP Top 10 for Agentic Applications standards. Beyond scanning, the platform provides runtime protection and deploys AI firewalls and guardrails based on observed agent behavior across multiple frameworks including Microsoft, OpenAI, Amazon Bedrock, and others.

Read at Techzine Global