# Falco runtime security

Published articles for Falco runtime security.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Agentic AI tooling: Why runtime security is the missing layer

DevFeed: [Agentic AI tooling: Why runtime security is the missing layer](<https://devfeed.tech/articles/agentic-ai-tooling-why-runtime-security-is-the-missing-layer-53192.md>)

Original publisher: [Read original article](<https://webflow.sysdig.com/blog/agentic-ai-tooling-why-runtime-security-is-the-missing-layer>)

Author: Alejandro Magallon

Published: 2026-05-19T00:00:00Z

Content type: article

Language: en

Sources: [Sysdig Blog](<https://devfeed.tech/sources/sysdig-blog.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Security](<https://devfeed.tech/topics/security.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [Orchestration](<https://devfeed.tech/topics/orchestration.md>), [multi-agent](<https://devfeed.tech/topics/multi-agent.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Microservice](<https://devfeed.tech/topics/microservice.md>), [Bash](<https://devfeed.tech/topics/bash.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [agentic-ai](<https://devfeed.tech/tags/agentic-ai.md>), [agentic-ai-security](<https://devfeed.tech/tags/agentic-ai-security.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agent-attack-surface](<https://devfeed.tech/tags/ai-agent-attack-surface.md>), [ai-agent-observability](<https://devfeed.tech/tags/ai-agent-observability.md>), [ai-agent-security](<https://devfeed.tech/tags/ai-agent-security.md>), [ai-agent-vulnerabilities](<https://devfeed.tech/tags/ai-agent-vulnerabilities.md>), [ai-coding-agent](<https://devfeed.tech/tags/ai-coding-agent.md>), [ai-coding-agent-security](<https://devfeed.tech/tags/ai-coding-agent-security.md>), [ai-container-security](<https://devfeed.tech/tags/ai-container-security.md>), [ai-credential-theft](<https://devfeed.tech/tags/ai-credential-theft.md>), [ai-infrastructure-security](<https://devfeed.tech/tags/ai-infrastructure-security.md>), [ai-orchestration-security](<https://devfeed.tech/tags/ai-orchestration-security.md>), [ai-runtime-monitoring](<https://devfeed.tech/tags/ai-runtime-monitoring.md>), [ai-runtime-security](<https://devfeed.tech/tags/ai-runtime-security.md>), [ai-sandbox-security](<https://devfeed.tech/tags/ai-sandbox-security.md>), [ai-security-posture](<https://devfeed.tech/tags/ai-security-posture.md>), [ai-workload-security](<https://devfeed.tech/tags/ai-workload-security.md>), [apis](<https://devfeed.tech/tags/apis.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloud-runtime-security](<https://devfeed.tech/tags/cloud-runtime-security.md>), [commands](<https://devfeed.tech/tags/commands.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [falco-runtime-security](<https://devfeed.tech/tags/falco-runtime-security.md>), [guardrails](<https://devfeed.tech/tags/guardrails.md>), [indirect-prompt-injection](<https://devfeed.tech/tags/indirect-prompt-injection.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [llm-security-risks](<https://devfeed.tech/tags/llm-security-risks.md>), [mcp-tool-poisoning](<https://devfeed.tech/tags/mcp-tool-poisoning.md>), [mitre-atlas-ai](<https://devfeed.tech/tags/mitre-atlas-ai.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [multi-agent-security](<https://devfeed.tech/tags/multi-agent-security.md>), [owasp-llm06-excessive-agency](<https://devfeed.tech/tags/owasp-llm06-excessive-agency.md>), [runtime-security](<https://devfeed.tech/tags/runtime-security.md>), [runtime-threat-detection](<https://devfeed.tech/tags/runtime-threat-detection.md>), [security](<https://devfeed.tech/tags/security.md>), [security-prompt-injection-attacks](<https://devfeed.tech/tags/security-prompt-injection-attacks.md>), [sysdig-ai-workload-security](<https://devfeed.tech/tags/sysdig-ai-workload-security.md>), [tooling](<https://devfeed.tech/tags/tooling.md>)

### AI overview

This article examines the security risks of agentic AI tooling. It describes how AI coding agents can access files, execute shell commands, call APIs, modify cloud configuration, and delegate work across agents without continuous human approval or runtime visibility. It outlines attack surfaces across MCP, skills, SDKs, managed agent platforms, and orchestration layers, including tool poisoning, credential theft, excessive agency, and lateral movement.

### Source excerpt

A developer asks an AI coding agent to refactor a microservice. Within seconds, the agent opens source files, executes shell commands, calls external APIs, and modifies cloud configuration. No human approves each step. No security tool monitors what the agent does between receiving the prompt and delivering the result.