{"type":"post","id":"securing-ai-agents-lessons-from-real-world-deployment-bbe57a","slug":"securing-ai-agents-lessons-from-real-world-deployment-bbe57a","title":"Securing AI Agents: Lessons From Real-World Deployment","description":"Uber describes a defense-in-depth framework for securing production AI agents, adding behavioral checks to conventional identity and authorization controls.","retrieval_nugget":"Uber describes a defense-in-depth framework for securing production AI agents, adding behavioral checks to conventional identity and authorization controls. Its design evaluates whether an action fits an agent’s declared purpose and the session context, not merely whether the agent has permission to take it—a distinction that matters as agents gain access to tools and sensitive data.","published_at":"2026-11-07","updated_at":"2026-11-07","record_date":"2026-11-07","date_kind":"published_at","topics":["agent-security","enterprise-agents","ai-security"],"entities":["Uber","Uber AI Registry","Argus","AI Guard","Agent Guard","LangFx"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Uber outlines a defense-in-depth framework for AI agents, addressing semantic-layer risks such as prompt injection, tool and memory poisoning, and goal hijacking.","prior_refs":["https://newruntime.com/posts/uber-s-ciso-on-building-an-insider-threat-6196c2/"],"source_url":"https://www.uber.com/us/en/blog/securing-ai-agents","source_urls":["https://www.uber.com/us/en/blog/securing-ai-agents"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:securing-ai-agents-lessons-from-real-world-deployment-bbe57a","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/securing-ai-agents-lessons-from-real-world-deployment-bbe57a/","markdown":"https://newruntime.com/posts/securing-ai-agents-lessons-from-real-world-deployment-bbe57a.md","json":"https://newruntime.com/posts/securing-ai-agents-lessons-from-real-world-deployment-bbe57a.json"},"markdown_url":"https://newruntime.com/posts/securing-ai-agents-lessons-from-real-world-deployment-bbe57a.md","next_reads":[{"type":"topic","path":"/topics/agent-security/","url":"https://newruntime.com/topics/agent-security/","title":"Agent Security","reason":"Explore the agent-security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agent-security.md","json_url":"https://newruntime.com/topics/agent-security.json"},{"type":"topic","path":"/topics/enterprise-agents/","url":"https://newruntime.com/topics/enterprise-agents/","title":"Enterprise Agents","reason":"Explore the enterprise-agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/enterprise-agents.md","json_url":"https://newruntime.com/topics/enterprise-agents.json"},{"type":"topic","path":"/topics/ai-security/","url":"https://newruntime.com/topics/ai-security/","title":"Ai Security","reason":"Explore the ai-security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/ai-security.md","json_url":"https://newruntime.com/topics/ai-security.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}