k9 Security
  • Use Cases
    • DevOps
    • Enterprise Security
    • MDR & SOC
    • OEM Integrations
  • Demo
  • Pricing
  • Docs
  • Contact
  • About
  • Blog
  • Sign up
Select Page

Building Evals for an AI Agent: From Zero to Consistency Testing

by Stephen Kuenzli | Apr 2, 2026 | AI, Security

We’re building an AI agent that triages cloud security findings. It reads a finding from AWS Security Hub or Prowler, assesses the risk, and tells an engineer exactly what to do about it with specific AWS CLI commands they can run. The agent worked. We had 620...

How to Connect Strands Agents to AWS MCP with IAM Authentication

by Stephen Kuenzli | Mar 31, 2026 | AI

We’re building a cloud security agent with Strands Agents that triages AWS security findings. The agent uses the AWS Knowledge MCP server to search and read AWS documentation. The agent looks up remediation guides, CLI syntax, and best practices as part of its...

k9 Security launches initial support for automated IAM security review with findings in OCSF format

by Chase Christy | Aug 22, 2025 | Announcements, Security

k9 Security now automates two critical IAM security review processes and produces high-signal findings in Open Cybersecurity Schema Framework (OCSF) format. This new capability significantly enhances your ability to identify and address critical IAM security risks in...

Effective IAM News – 2025-05-16

by Chase Christy | Aug 1, 2025 | The Effective IAM Newsletter

NCC Group’s AI Red Team recently published key findings after penetration testing dozens of AI applications. Analyzing Secure AI Architectures reveals that major AI vulnerabilities stem not from model flaws, but from misunderstanding how AI systems interact with...

Scaling IAM Security For Major Cloud Platforms: Insights from the ScaleToZero Podcast

by Chase Christy | Jul 12, 2025 | Presentations, Security

In a recent episode of the ScaleToZero podcast powered by Cloudanix, k9 Security’s founder, Stephen Kuenzli, broke down one of the most persistent challenges in cloud security: how to scale identity and access management (IAM) in large, fast-moving engineering...

Recent Posts

  • How to Prioritize CVEs by Risk, Not Severity
  • Your MCP server on AgentCore Runtime fails its health check at `/mcp/`. Here’s how to fix it.
  • Severity is no longer a triage input. Risk scoring you own is.
  • Generate least-privilege EventBridge policies and restrict access to your AWS Organization with k9-cdk
  • Building Evals for an AI Agent: From Zero to Consistency Testing

Recent Comments

    Copyright 2026 K9 Security Inc.