Cyron Blog
Practical guides, threat analysis, and release notes from the Cyron team.
Introducing Cyron AI Security: agent boundary protection for MCP and A2A
Cyron AI Security inspects what AI agents send to tools and to other agents, blocks the threat classes you choose and runs fully air-gapped on-premise.
Read article
One sensor, two engines: how Cyron closes the loop on AI-agent attacks
How Cyron On-Premise handles an attack on an AI agent: the kernel sensor captures it, Cyron AI Security judges it, and the sensor blocks the source.
Read article
What is new in Cyron, September 2026
Cyron AI Security arrives, MCP and A2A traffic is recognised in every edition, and attacks on WebSocket, gRPC and streams now trigger a block.
Read article
Tool poisoning, explained: how a tool description can hijack your agent
A tool description can hijack your AI agent. See where poisoned instructions hide, why gateways and firewalls miss them and what to check today.
Read article
Why WAFs Miss WebSocket Attacks, and How to Detect Them
Many WAFs stop reading at the WebSocket handshake. See the attacks that slip past, how to detect them in live frames, and a six-point test checklist.
Read article
Cyron March 2026 Release: Streaming and RPC Protection
Cyron's March 2026 release brought streaming and RPC protection to the platform. Read what shipped, then follow every later release in the Cyron changelog.
Read article
Send API Security Alerts to Your SIEM by Webhook
Send signed, OCSF-aligned API security events to any SIEM that accepts a webhook. See a sample event, the fields that matter and how to set it up today.
Read article
API Security for Startups: First Steps and What It Costs
A 30-day API security plan for startups, with a cost table of free tools and published prices. Start with what is free and add cover as you grow.
Read article
BOLA vs BFLA vs IDOR: API Authorization Attacks Explained
BOLA, BFLA and IDOR compared: what each attack targets, the signals that reveal it in live API traffic, and how to test your own endpoints today.
Read article
Credential Stuffing on APIs: Detection Signals That Work
Credential stuffing looks like ordinary failed logins across many accounts. Learn the detection signals that separate it from spraying and brute force.
Read article
How to Detect SQL Injection in API Traffic
Where SQL injection hides in API requests, the five variants Cyron recognises and why context checks keep alerts clean. Includes one worked request.
Read article
OWASP API Security Top 10 (2023): A Practical Checklist
The OWASP API Security Top 10 (2023) as a working checklist: each risk, how to test for it, and what Cyron detects in all ten categories. Use it today.
Read article