What we learned about AI agent security by monitoring our agents

To effectively secure AI agents, organizations must move beyond monitoring final API calls and instead implement a comprehensive "AI Bill of Materials" (AI-BOM) that inventories all models, tools, and connected services. By tracing the entire execution path—from initial prompts and retrieved content to downstream tool actions—security teams can better detect complex risks such as prompt injection and unauthorized data access.