Application-Native vs Remote Security Policies: A Technical Guide
Compare application-native and code-native security rules with remote policies, including ownership, architecture, Arcjet, Datadog AI Guard, and Runlayer.
18 min readArcjet Learning Center
AI agent runtime security and application protection guides
Learn how to secure production AI workflows, enforce agent actions, protect APIs, stop automated abuse, and control resource use inside your application.
AI Security
Identity, architecture, and runtime controls for agents that call tools, access data, and take actions.
AI Agent Security Architecture: In-Code vs Proxy vs Gateway vs Security Agent
Compare in-code, proxy, AI gateway, and security-agent controls by visibility, enforcement, context, latency, failure modes, and threat coverage.
17 min readAI Agent Identity and On-Behalf-Of Authorization
AI agent on-behalf-of authorization: delegated identity, OAuth token exchange, actor claims, credential downscoping, runtime policy, and audit trails.
22 min readWhat Is AI Agent Runtime Security?
AI agent runtime security for unauthorized tool calls, prompt injection, sensitive data, automated abuse, action sequences, and production cost controls.
12 min readWeb Security
Application-layer guidance for securing APIs, stopping automated abuse, and controlling resource consumption.
API Security Best Practices
API security best practices for authentication, object authorization, input validation, webhooks, abuse controls, monitoring, and continuous testing.
14 min readWhat Is API Abuse? How Bots Exploit APIs
API abuse explained: how bots automate valid operations for fraud, scraping, account takeover, and cost exhaustion, and how application controls stop them.
13 min readRate Limiting Algorithms: Token Bucket vs Sliding Window vs Fixed Window
Compare token bucket, sliding window, fixed window, and leaky bucket rate limits by fairness, burst handling, state cost, and distributed API trade-offs.
8 min read