Inspect a configuration
MCP Config Checker
Spot exposed secrets, broad file access, and risky startup commands. Checks run in your browser.
Check a configFor teams defending real systems
AI security you can
put to work.
Check your agents. Understand the incidents. Leave with one useful action before next Wednesday.
Explore MCP, Zero Trust, or our Exploit Wednesday guide.
The owl is open to domain conversations.Contact info@ideaascode.com
The workbench
Start with something useful.
Inspect the instructions
Agent Skill Reviewer
Review SKILL.md for risky commands, secret access, and permission bypasses. Keep your file in your browser.
Review a skillUnderstand access
Agent Permission Explorer
Map what an agent could reach across your tools, identities, and production systems.
Explore permissionsNeed a wider view of your controls? Run the six-question readiness check
From the desk
The latest analysis.
Identity
Invisible Unicode Phishing: The Lemon-Juice Ink of Email
Invisible Unicode characters can disguise phishing from email filters. Learn what ASCII smuggling means and how to protect inboxes and AI agents.
AI-assisted Human reviewed
Incident Response
SOCI 8B and 8C: Security After the Internet Cable Is Unplugged
Understand SOCI 8B and 8C, phishing-resistant MFA, and OT isolation. Plan secure access and recovery that keep critical infrastructure running without the cloud.
AI-assisted Awaiting editor review
AI Agent Security
AI Incidents Are Already Here: Prepare for the Next Rogue Agent
What the DseWiki incident reveals about AI agent security, and how teams can prepare with scoped access, network controls, monitoring, and incident response.
AI-assisted Human reviewed
Find your starting point
What are you defending?
Beyond the headlines
