Tools · Exposure management
AI security posture and exposure management (AI-SPM) tools
AI security posture management (AI-SPM) and exposure management tools find the AI services, models, pipelines and agent configurations running across cloud accounts and AI platforms, then flag the misconfigurations and the paths an attacker could use to reach them. A team needs one when AI workloads go live faster than security can review them, because each model server or agent workflow tool nobody reviewed is attack surface nobody is tracking.
Exposure management 2
-
Tenable One AI Exposure (vendor site, opens in a new tab)
generally availableTenable
Detects shadow AI and tracks how employees and agents use approved AI platforms, including the data exchanged. It finds unsafe AI platform settings, agent configurations and third-party integrations, detects prompt injection and jailbreak attempts, and enforces AI acceptable-use policies.
-
Wiz AI-SPM (vendor site, opens in a new tab)
generally availableWiz
Discovers AI services, models, SDKs and pipelines in cloud environments without agents, detects pipeline misconfigurations, and shows attack paths to AI services.
The briefing
New AI agent governance tools, by email
The briefing's New Tools section covers the latest governance launches, each linked to the vendor's announcement, next to the news that decides which ones matter. At least once a week, five-minute read, free.
You confirm by email. Unsubscribe in one click.
Questions to ask vendors
Neutral questions for a request for proposal (RFP) or a security questionnaire. No product here is named as the answer.
-
Which sources does discovery read: cloud provider APIs, code repositories, endpoints, or SaaS settings? What does each one miss?
-
Does it find self-hosted AI tooling, such as model servers and agent workflow tools, and match their versions against known exploited vulnerabilities?
-
How is an exposure ranked: by severity score alone, or by what an attacker could reach from it?
-
Can each finding go to our ticketing system with an owner attached?
-
Does discovery feed an inventory you own and can export, or a dashboard you rent?
More questions, grouped by topic: Questions to ask AI agent security vendors.
Related incidents
- CISA added an actively exploited Langflow remote code execution flaw to its KEV catalog
- CISA confirmed active exploitation of a Ray code injection flaw
- Attackers exploited an MLflow SSRF flaw to steal cloud credentials
- NVIDIA NemoClaw exposed a local Ollama instance to any web page
Every record in the AI agent incident database links the sources that reported it.
Missing a product, or found an entry that is out of date? Write to [email protected]. A submission is read, never paid for, and does not guarantee a listing. The glossary defines the terms used here.