#Appsec — Kunal Ganglani

claude code terminal laptop screen — illustration for article on Claude Code Security [2026]: Risks, Safe

Claude Code Security: Risks, Safe Setup, Team Policy

Claude Code is safe only if you treat it like a junior engineer with terminal access. Here’s the 2026 playbook: permissions, sandboxing, egress controls, MCP allowlists, retention settings, and incident response.

Smartphone screen displaying chatgpt interface on keyboard

Cybersecurity

AI Agent Attack Surfaces: What AppSec Threat Models Miss

Agents don’t just “generate text”. They read files, browse, call tools, and remember things. That breaks classic AppSec threat models. Here’s the agent-native one—and the mitigations you can actually ship.

Keep exploring

Close to this topic, not on this page.

How to Stop Repo Prompt Injection in Coding Agents Repo-level prompt injection turns “clone and ask the agent” into a supply-chain compromise. 10 min read
AI and LLM Security: Every Major Threat Vector Mapped AI and LLM security spans prompt injection, supply chain attacks, agent control flow vulnerabilities, and model misuse. 9 min read
Indirect Prompt Injection in AI Agents: 10 Red-Team Tests Every major AI coding agent shipped with exploitable indirect prompt injection vulnerabilities in 2025. 16 min read