- A brief description of the issue and its potential impact
- Information on relevant compliance and regulatory requirements
- Explanations of the security risks and potential consequences of not addressing the issue
- Specifications for the rule pass/fail policy and severity criteria
- References to industry-recognized standards and best practices
Rules by category
Discovery rules
Static analysis findings about missing configurations, metadata, and evaluation scores detected during agent discovery.
MCP server rules
Vulnerabilities in MCP servers, tools, and their configurations.
Agent runtime rules
Runtime behavior vulnerabilities in agent execution, memory, communication, and control flow.