Solutions / Agent Security

Protect agents from manipulation and unsafe actions.

Inspect instructions, conversations, tool results, and responses for attacks and policy violations. Pair guardrails with access controls so your agent’s actions stay within the permissions you define.

Delivered through Cortega AI Guard.

A group collaborating at a workshop table
Agent Security / What you can do

Security across the agent’s workflow.

Conversation context

Detect attacks that develop over time.

Look for impersonation, false urgency, fraud, and policy violations across messages, sessions, and conversations. Set threat levels for each application.

Explore attack scenarios →
Tool results

Check what the agent reads next.

Inspect content from documents and tools for injected instructions that redirect the task. Combine detection with model and MCP tool permissions.

See the security architecture →
Data and policy

Apply your handling rules.

Detect sensitive data and credentials, and configure masking or blocking. Check whether responses follow application policies and retain findings for review.

Explore data and policy checks →
Cortega Guardrails in action

Explore Cortega Guardrails

Example scenarios below show specific attacks and how Cortega Guardrails can be configured to handle them.

Swipe to explore →

01

Social engineering detection

Detect impersonation, false urgency, and pretexts that manipulate an agent.

See it in action ↗
02

Financial fraud prevention

Detect account-takeover, identity-failure, and pressure tactics that enable fraud.

See it in action ↗
04

Agent Poisoning

Detect malicious tool-result instructions that redirect an agent’s behavior.

See it in action ↗
05

Data exfiltration & PII

Detect sensitive data and credentials. Mask or block disclosure under your policy.

See it in action ↗
06

SIM Swap Detection

Detect identity-check bypasses and phone-transfer manipulation.

See it in action ↗
07

Unauthorized vs Authorized Data Access

Compare permitted requests with attempts to access data without authorization.

See it in action ↗
In the console

Every decision, with evidence

Swipe through the console →

Guardrails · PII, injection, social engineering, policy
Cortega guardrails configuration
Cortega guardrail template library: SQL injection, OpenAI Moderation, local model guardrail, Azure Content Safety, Google Model Armor, Bedrock Guardrails, state setter/checker, policy document, social engineering, and AI Verifier for legal and documents
Guardrail log: Fraud Detection Policy passing and blocking requests
Guardrail log: Refund Policy passing and blocking requests
Guardrail log: Fraud Policy passing and blocking requests

From the Cortega console.

How it works

Cortega Guardrails architecture

Inspect incoming instructions, proposed actions, tool results, and outgoing answers. Apply the guardrails relevant to each stage of the agent workflow.

Requests pass social-engineering, fraud, SIM-swap, policy and data checks before reaching the model or agent. Tool calls receive access checks; tool results are inspected for agent poisoning and injection before returning to the agent. Responses pass policy and data checks before delivery.
Teal: requests and actions. Gray: returned content. Checks and actions follow the configured policy; the scenarios below demonstrate individual protections.
See the guardrails in action ↓

Cortega Guardrails

See the guardrails in action

Explore attacks, policy decisions, and response verification in Cortega Arena.