0:00 AI security is not agent security. So what's the difference? Short version: one guards what an AI says. The other, what it does.

0:11 Picture a chatbot: a model, text in, text out. AI security wraps that conversation, and what could leak. Prompt injection: "Ignore your previous instructions." It's number one on OWASP's LLM Top 10. AI security tools read text: input and output filters.

0:29 But plenty of AI doesn't just talk. An agent is a model with hands. Run a command. Call an API. Query a database. Send an email. That's the action surface. Agent security controls it. Not "Is this text okay?" But "Should this agent do this, right now?"

0:49 Is AI security enough for agents? OWASP's example: an email summarizer that can also send. One incoming email hides instructions. The assistant reads it, then forwards your sensitive information to the attacker. Your prompt was "Summarize my emails." Nothing to flag. The harm wasn't in the prompt. It was in the action. Researchers have warned about this since 2023. Agents hold keys. OWASP warns leaked credentials let them operate far beyond their intended scope. Prompt filters? Partly. They don't judge a shell command.

1:24 So where does each control sit? Guardrails sit around the model. The agent harness is the loop that runs the model's tools. You can add hooks. But they run inside the agent they govern. A gateway, AI or MCP, is a network proxy. It only sees what's routed through it. At Ackuity, we count 11 kinds of agent action, and only 3 can cross a gateway: LLM, MCP and API calls. Shell commands and SQL queries never do. Agent security sits in the execution path: beside the agent, outside its reach. That's execution control: checking each action before it runs.

2:01 AI security guards what the model says. Agent security governs what the agent does. You need both. But only one stands there when the agent reaches for the button. At Ackuity, that's what we work on: checking every agent action before it runs. Want to see it on your agents? Request 30-day trial access, or visit us at ackuity.ai for details.