Security
7 guides on Security.
Prompt injection, tool authorisation, tenant isolation and redaction. The recurring theme is that a control the model can talk its way past was never a control, and that the boundary has to live somewhere the model cannot reach.
Multi-Tenant AI Agents in .NET: Isolation That Actually Holds
Every tenant boundary you rely on in a normal web app — the connection string, the row filter, the claim — gets crossed differently once a model is in the loop. Here is where the leaks actually happen and what to do about each.
Redacting PII Before It Reaches the Model: A .NET Pattern
Once a customer record leaves your process and lands in a model provider log, you cannot get it back. Here is a redaction layer for .NET that sits in front of the model, survives tool calls, and does not quietly break your prompts.
Securing a Remote MCP Server in C#: OAuth 2.1 and Protected Resource Metadata
The moment an MCP server leaves localhost it becomes a public API with tool-calling attached. Here is what the spec actually requires, what the C# SDK gives you, and the parts you still have to think about.
Prompt Injection in .NET Agents: What Actually Works as a Defence
Prompt injection is not a prompt problem, so prompt fixes do not solve it. A .NET engineer's guide to the defences that hold — capability scoping, provenance tracking, output gating — with C# you can lift.
The Agent Harness in Microsoft Agent Framework (.NET Guide)
The Agent Harness in Microsoft Agent Framework gives .NET agents sandboxed shell execution, file access, and human-in-the-loop approvals. How to wire it up.
Content Moderation and Guardrails for .NET AI Apps
User input and AI output both need checking. How to add content moderation and guardrails to a .NET AI app — filtering unsafe input, output, and enforcing scope.
Securing AI Agents in .NET: Auth, Secrets, and Guardrails
An AI agent that can call tools is a new attack surface. A practical security checklist for .NET agents: authenticating callers, protecting secrets, and guardrailing tool use.