#Compliance — Kunal Ganglani

Two people reviewing documents at a table

How to Ship EU AI Act Compliance for AI Agents

A shippable, vendor-neutral evidence pack for AI agents: run logs, tool approvals, guardrail configs, retention/redaction, and an audit export you can produce in days.

A MacBook with lines of code on its screen on a busy desk

Cybersecurity

How to Implement Field-Level Redaction for RAG Pipelines

An auditor-friendly RAG privacy pattern: deterministic redaction, optional reversible tokenization, TTLs, deletion propagation, and a leakage test suite in CI.

Keep exploring

Close to this topic, not on this page.

AI Agent Memory Exfiltration: Kill Chain + 5-Step Hardening A proof-of-concept showed Claude's memory could be silently exfiltrated to an attacker's server with no user warning. 15 min read
AI Agent Attack Surface Map and Security Checklist The first developer-friendly attack surface map combining OWASP's Top 10 for Agentic Applications, Cisco's MemoryTrap disclosure, and June… 19 min read
Indirect Prompt Injection in AI Agents: 10 Red-Team Tests Every major AI coding agent shipped with exploitable indirect prompt injection vulnerabilities in 2025. 16 min read