# The Agent Baseline: 35 Controls, But Where Should You Start?

DevFeed: [The Agent Baseline: 35 Controls, But Where Should You Start?](<https://devfeed.tech/articles/the-agent-baseline-35-controls-but-where-should-you-start-7794.md>)

Original publisher: [Read original article](<https://snyk.io/blog/agent-baseline-35-controls-where-should-you-start/>)

Author: Krysztof Huszcza; Ezra Tanzer

Published: 2026-08-12T04:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Securing AI](<https://devfeed.tech/topics/securing-ai.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [black-hat](<https://devfeed.tech/tags/black-hat.md>), [blog](<https://devfeed.tech/tags/blog.md>), [coding](<https://devfeed.tech/tags/coding.md>), [devops](<https://devfeed.tech/tags/devops.md>), [docker](<https://devfeed.tech/tags/docker.md>), [enablement](<https://devfeed.tech/tags/enablement.md>), [production](<https://devfeed.tech/tags/production.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

The Agent Baseline presents six security outcomes, 35 controls, and an open reference architecture for running AI agents at enterprise scale. It addresses how organizations can decide where to begin, identify gaps, and sequence controls across coding, internal, and production agent use cases.

## Source excerpt

The Agent Baseline defines 35 controls across six security outcomes--but the right starting point depends on how your organization uses agents. Learn how to sequence controls for coding, internal, and production agents.