Model and Provider Risk

7 articles

Agent Security Agentic Permissions AI Agent Security AI Governance Evidence Ai Impact AI Incident Response Ai Integration AI Red Teaming AI SDLC & Product Security AI Security AI Security Engineer Career Ai Security Engineering AI Security Foundations AI Security Monitoring AI Security Tools AI Supply Chain AI System Inventory Architecture and Trust Boundaries Ats Systems Attack Career Development Corporate Culture Corporate Culture And Leadership Culture Security Cyber Security cybersecurity Cybersecurity Strategy Data Exposure and Privacy Defend Detection Engineering Distributed Governance Distributed Systems Economic Governance Education Evaluation and Regression Testing Evidence Evidence Based Governance Future of Work governance Governance And Resilience Governance Evidence and Customer Trust Governance, Risk & Compliance Hiring & Talent Hiring Strategy Incident Response Incident Response & Observability Leadership And Governance LLM Application Security Logging and Telemetry Map MLOps & Platform Security Model and Provider Risk Model Supply Chain Operational Risk Organizational Governance Organizational Resilience Platform Governance Privacy & Data Protection Prompt Injection Prompt Injection & Context Security Psychological Safety psychometrics RAG Authorization RAG Security Recruitment And Talent Red Teaming & Evaluations red-team seceng-workbench Secure Architecture & Design Secure RAG Security Architecture Stochastic Governance Stochastic Resilience Systemic Resilience Talent Acquisition Talent Engineering Team Engineering Technical Intelligence Threat Modeling Toolchain Integrity Training & Workshops Vendor Risk & Procurement Workforce Science Workplace Evolution

Map

The AI Security Buyer’s Guide: How to Evaluate Vendors for LLM Firewalls, Guardrails, Evals, and Monitoring

AI security buyers should judge vendors by the job to be done: filtering, testing, evals, access, logs, leaks, rules, and proof. Choosing a vendor should start with design and risk, not just labels.

9 min read

Defend

Secrets Management for AI Apps: API Keys, Model Providers, Tool Credentials, and Delegated Access

AI applications need disciplined secrets management across model provider keys, vector stores, tool credentials, OAuth tokens, browser sessions, cloud keys, notebooks, logs, prompts, and agent runtimes. Secure design requires centralized secret storage, short-lived and scoped credentials, delegated authorization, redaction, rotation, revocation, and incident-ready evidence.

10 min read

Defend

Cloud Security for AI Workloads: GPUs, Secrets, Buckets, Model Endpoints, and Notebook Risk

Cloud security for AI workloads requires inventorying AI assets, protecting model endpoints, securing GPU and notebook environments, managing secrets, locking down object storage and vector stores, scanning containers, limiting egress, monitoring cost, and integrating AI infrastructure into normal cloud security operations.

10 min read

Defend

LLMOps Security: CI/CD, Secrets, Eval Gates, Model Registry Controls, and Deployment Promotion

LLMOps security requires CI/CD controls for prompts, tools, model configuration, provider routing, evals, secrets, registries, deployment promotion, monitoring, rollback, and governance evidence. AI release processes must track every artifact that can change system behavior.

10 min read

Defend

Securing Open-Source Models: What to Check Before Running a Model in Production

Open-source models require a production intake process covering provenance, license review, file formats, remote code, unsafe serialization, dependencies, containers, evals, serving infrastructure, monitoring, rollback, and governance evidence.

11 min read

Map

The AI Security Engineering Stack: 50 Tools Across Red Teaming, LLMOps, Governance, and Detection

Teams often buy a tool category before they define the control gap. That creates duplication and gaps at the same time. A stack map helps the buyer see the boundaries first.

3 min read

Defend

Model Supply Chain Security: From Hugging Face to Docker Images to Fine-Tuned Weights

The model supply chain is now a real security boundary. Teams pull weights, adapters, datasets, containers, and prompts from many places. Without provenance, the release path becomes impossible to trust.

3 min read