Obot Learning Center
How to Detect Shadow AI in Your Organization
Most of the security stack already sitting in a typical environment was built to answer a narrower question than the one that matters now. DLP was built to stop a file from leaving through email. CASB was built to flag a new SaaS domain showing up in traffic. Neither was built to notice an employee […]
Shadow AI Risks: What Enterprises Need to Know
Ask a security leader how much financial data their employees are pasting into AI tools, and the answer will be wrong by a factor of nearly three. Ask the same question about API keys and credentials, and the estimate will be close to exact. That split isn’t a coincidence of what security teams happened to […]
Shadow MCP Servers: How Unapproved MCP Servers Create Enterprise Risk
A shadow MCP server doesn’t announce itself the way shadow IT used to. There’s no expense report line item, no new domain showing up in a CASB scan, no login page for a security team to stumble across. There’s a process running on a developer’s laptop or a personal cloud instance, talking to whatever internal […]
What Is Shadow AI? (And How It’s Different from Shadow IT)
Most security teams already run a monitoring stack built for the last problem. DLP watches for sensitive data leaving the network, and CASB flags unsanctioned SaaS. Both look for one signature: a new application showing up somewhere it wasn’t approved. Shadow AI doesn’t produce that signature. The traffic is often an encrypted session to a […]
MCP Server Governance: What Actually Gets Enforced, Not Just Written Down
In March 2026, one endpoint in nginx-ui’s MCP integration sat behind an IP allowlist and auth middleware. The endpoint next to it, the one that actually executed tool calls, including configuration writes and server restarts, had none. Shodan found more than 2,600 instances running that configuration in production. Nobody had decided the second endpoint needed […]
What Are MCP Tunnels? (And Why Vendor-Locked Tunnels Are a Problem)
The part of an MCP tunnel rollout that actually takes time isn’t opening the connection. It’s confirming, before anyone signs off, that the vendor providing the tunnel can’t read what passes through it. That question shows up in nearly every enterprise MCP security review once a private server is involved, and the answer depends entirely […]
Best MCP Gateways and AI Agent Security Tools (2026)
Comparing the best MCP gateway and ai agent security tool options for 2026, what each category actually governs, and how to pick between them.
What Is an MCP Control Plane?
An MCP control plane governs your MCP server fleet: discovery, policy enforcement, and audit. Here is what it is, why MCP alone is not enough, and how the architecture works.
OWASP Top 10 for LLM Applications: What Enterprise MCP Teams Need to Know
The OWASP AI top 10 isn't one document. It's three separate OWASP lists, and only one of them was built to govern MCP servers directly.
What Is an Agent Control Plane?
An agent control plane governs AI agents in production: identity, permissions, lifecycle, and audit. Here's how it works and where MCP enforcement fits in.
What Is an AI Control Plane?
An AI control plane is the governance layer that inventories, monitors, and enforces policy across every AI agent, LLM call, and MCP tool connection in the enterprise — the piece most companies are missing as agent counts scale from dozens to hundreds of thousands. The teams that treated AI agent governance as a future-state problem […]
ChatGPT MCP Support: What It Means for Enterprise AI
ChatGPT now connects to any remote MCP server and executes write actions. Here is what enterprise IT teams need to govern before enabling it at scale.