AI Agent Security Bible
by Isaac Otu
Before You Begin
If you have let an AI assistant into your mail, your files or your accounts, this book is for you. So is the person who has to say yes or no when staff ask for one at work. You do not need a security background. You need about fifteen minutes a chapter and an assistant you actually use.
One assistant follows you through the whole book: an inbox assistant that reads your mail and helps with your work. The early chapters show how it can go wrong. The later chapters change it, one step at a time, until it is a good deal safer than it was on the first page.
The whole book rests on three questions. Ask them of any assistant, for the job you have in mind.
If all three answers are yes, change the job or the setup until one of them is no. If you cannot, do not hand that job over. Chapter 5 explains why this works, and Appendix A turns it into a checklist you can copy.
Each chapter opens with a scene or a real case, then explains its idea in plain words.
Partway through, a short paragraph marked "At work" shows the same idea in a small business. It follows an online shop with four staff, whose owner has connected an AI agent that helps with customer support. The shop shows what the idea means for a team, not just for one person.
Near the end of each chapter, a box called "Before you grant access" tells you what to do that day. The chapter closes with a section called "Under the hood", which has the technical detail. Skip it if you like; nothing else in the chapter depends on it.
The Sources section at the back says where each chapter's facts came from, and which advice is this book's own reasoning.
Each real case is told in full in the chapter where it matters, and returns briefly when a later idea explains it again. Appendix D gathers all eighteen in one place, with dates, sorted by what actually happened: an attack in the wild, a flaw reported privately and fixed, a researcher's demonstration, or a failure with no attacker at all. They are different things, and it helps to know which one you are reading about.
Products change fast. Whatever this book says a product does was true in September 2026. The questions do not change when the screens do, and Appendix E gives you the ones to put to a vendor whenever you need to check again.
Keep the appendices; they are the part you will come back to. Appendix A has the checklists, one for a person and one for a team, and Appendix E has templates to copy and fill in. If you read only one chapter, read Chapter 5.