KonaSense Blog
Field notes on AI security
Research, attack patterns, and product thinking from the KonaSense team. Practical posts for security, platform, and governance leaders.
Browse by category
Your security team has never seen the apps breaching you
Explore the risks of broad OAuth permissions in AI tools, highlighted by the Vercel breach, and learn essential steps to safeguard your accounts.
What Is Shadow AI: And Why It Is Nothing Like Shadow IT
Shadow AI is not shadow IT. It is a faster, broader, and more invisible category of risk that the 2020 governance stack was not designed to see.
Treasury just raised the bar on AI risk. Here is the practical playbook.
What the new Treasury guidance on AI risk actually requires, and a practical playbook for security and compliance leaders implementing it this quarter.
Multi agent orchestration is the next blind spot
When agents call agents call tools, the audit trail breaks. Why multi-agent orchestration is the next visibility gap for security teams.
Shadow AI: Identifying and Mitigating Your Organization's Invisible Risk
A practical guide for security leaders on detecting and reducing the invisible risk surface created by unsanctioned AI tool usage across the workforce.
KonaSense: People-first AI security for the real world
Why AI security has to start with the people using AI every day, not the models. The thinking behind the KonaSense platform and what we are building.