Blog Post Archives - Coalition for Secure AI

July 20, 2026

CoSAI Year 2: The Future of Agentic Security

Launched at the Aspen Security Forum two years ago, the Coalition for Secure AI (CoSAI) set out with a clear purpose: to establish a collaborative, open frameworks for safeguarding AI systems. Since then, the AI landscape has evolved at an unprecedented pace, making the demand for shared best practices and […]

May 28, 2026

Who’s Responsible When AI Goes Wrong? A New Framework Aims to Answer That Question

When an AI system causes harm or fails a compliance audit, the finger-pointing starts almost immediately. The model provider blames the configuration. The cloud provider points to the tenant. The application team cites model limitations. Our new AI Shared Responsibility Framework is designed to end that cycle before it starts. […]

April 29, 2026

After RSAC™ 2026: The MCP Security Question Everyone Kept Asking

April 2026 Last week at RSAC Conference 2026, Jason Clinton and I presented “Securing MCP: Mitigating New Threats in Agentic AI Deployments” to a packed room in Moscone West. We walked through twelve threat categories, nearly forty individual threats, and a set of controls spanning the full MCP stack — […]

April 20, 2026

Addressing what’s next in securing enterprise AI

Authors: Akila Srinivasan and J.R. Rao. Based on a session presented at RSAC 2026 Conference by Akila Srinivasan (Anthropic) and J.R. Rao (IBM) on behalf of the Coalition for Secure AI (CoSAI). AI workloads are already in production across most enterprises, but security guidance has not caught up. That gap […]

April 17, 2026

Who’s Minding the Agent? A New Framework for AI Identity and Access Control

An invoice-processing agent with broad financial system access gets manipulated through prompt injection, malicious instructions embedded in the data it reads, and begins initiating fraudulent payments, all under a shared service account with no clear audit trail. A customer-support agent with access to CRM, knowledge-base, and email tools starts combining […]

March 31, 2026

When the Bots Run the Incident Response: What AI Agents Mean for Enterprise Security

Our latest paper maps the security challenges of a world where AI doesn’t just answer questions — it acts. Picture this: it’s 2 a.m., an outage hits your production infrastructure, and no human has noticed yet. Within seconds, an autonomous AI agent wakes up, pulls the relevant logs, creates a […]

February 9, 2026

Cisco’s Donation of Project CodeGuard to CoSAI: A New Chapter in Securing AI-Generated Code

In October 2025, Cisco open-sourced Project CodeGuard, a new framework that embeds secure-by-default practices directly into AI coding agent workflows. I am honored and excited to announce that Cisco has donated Project CodeGuard to CoSAI.

January 20, 2026

Securing the AI Agent Revolution: A Practical Guide to Model Context Protocol Security

The Coalition for Secure AI (CoSAI) has released a comprehensive whitepaper addressing Model Context Protocol (MCP)—the emerging standard that's rapidly becoming the backbone of AI agent infrastructure.

December 23, 2025

Operationalizing the CoSAI Risk Map (CoSAI-RM)

CoSAI Project Governing Board (PGB) co-chair Omar Santos explains how to operationalize the CoSAI Risk Map (CoSAI-RM) through a structured, persona-based approach that moves beyond ad-hoc security measures. Santos shares a practical, four-phase approach for turning CoSAI-RM from a conceptual model into an actionable risk management strategy, from persona-based risk […]