A developer-authored guide outlines the features, architecture, and development costs of enterprise AI compliance automation platforms in 2026, arguing that such systems must function as a control pla…
A developer released iFixAi, a Python CLI that audits AI agent execution traces in under 120 seconds, scoring them against the EU AI Act, ISO 42001, NIST AI RMF, and OWASP LLM Top 10. The tool perform…
An AI agent that stores everything it does scores 55 percent on a benchmark, while the same model restricted to memories passing a strict quality check reaches 71 percent, according to research cited …
AgentSec Audit launched as an automated security scanner, policy linter, and compliance certification tool for autonomous AI agents, tool configurations, and Model Context Protocol (MCP) servers. The …
Sierra announced it has achieved AIUC-1 certification for its AI agents following an independent audit by Schellman and testing by the Artificial Intelligence Underwriting Company (AIUC). The AIUC-1 s…
ExposurAI launched a security product that scans 65,535 custom ports and uses an LLM threat engine to correlate findings into a 0-100 executive risk score, according to the company's product announcem…
A quality-management engineer working in a Class II medical device environment describes discovering that an AI feature in an eQMS had approved a CAPA closure without any written record of who authori…
Vanta has released Agentic Trust Controls, an open-source library of 65 controls for AI agent governance, expanding its early-access version from 61 controls and mapping to ISO 27001 and ISO 42001. Th…
Enterprises are increasingly rejecting the traditional approach of moving proprietary data to frontier AI models, opting instead for AI systems that operate within their own data environments, accordi…
Software Analyst Cyber Research (SACR) published the AI and Agentic Risk Management and Control Framework (ARMCF) in July, outlining six governance domains—GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, …
AI governance is the set of processes, standards, and guardrails that ensure AI systems are safe, ethical, and aligned with human-defined objectives, according to a guide on operationalizing it in the…
Perforce and the Puppet team outlined their approach to responsible use of AI in open source development, emphasizing that all contributions—whether human-written or AI-generated—are held to the same …
Enterprise AI safety certificates such as SOC 2 Type II and ISO 42001 are worthless at runtime because they treat safety as a static design-time product rather than a live execution problem, according…
The Cloud Security Alliance (CSA) released AI Controls Matrix (AICM) v1.1, expanding to 247 control objectives across 18 domains with a dedicated Model Security domain and mappings to major AI governa…
A developer detailed how to build an audit trail for autonomous AI agents, addressing challenges like non-deterministic behavior, causality tracking, and compliance with regulations such as the EU AI …
The security industry is deploying autonomous AI agents for tasks like triage and investigation, but governance frameworks lag behind capabilities. Regulations such as ISO 42001, DORA, NIS2, and the E…
Radware announced on July 7, 2026 that its Agentic AI Protection product now supports developer-hosted agents like Claude Code, adding compliance reporting and visibility into agent activity. The upda…
A new compliance evidence and audit-trail agent automates evidence collection for regulated environments by observing events, mapping them to a user-supplied control catalog, and sealing results into …
A developer's platform for structured compliance-training programmes repeatedly failed internal quality checks on an ISO 42001 Lead Auditor course due to subtle drift into other standards. Investigati…
Enterprises deploying autonomous AI agents face five novel failure modes—goal misgeneralization, action amplification, tool chain exploitation, instruction injection, and silent drift—that traditional…