#ai-agents

4 posts

NHI Security in 2026: The Category Is Consolidating Before It Learned to Detect

A detection engineer's map of the NHI vendor landscape — and why it's being acquired into platforms before it built the part that catches breaches.

Prompt injection is OWASP's #1 LLM risk and you can't filter it out. Stop detecting the prompt — detect the lethal trifecta closing in one session.

An AI agent is a non-human identity with an opaque decision layer. You can't detect the prompt injection — so watch what the agent's credential does.

You have ~45 non-human identities per human — and the signals your detection runs on (MFA, impossible travel, login geo) don't exist for any of them.