What Security Teams Can Do To Tame Wild Code

Summary: The article describes how employees are building AI-assisted workflows, apps, and agents faster than security processes can track them, with a sales manager's lead-routing workflow as the opening example. It argues that education, sandboxes, and AI steering committees are insufficient on their own, citing Tines field CTO Brad Rumph's line that "Sandboxes solve the design problem and leave the runtime problem alone."
Key Takeaway: A small experiment can become an operational dependency before security knows it exists, and a workflow can operate with too much access or expose data to the wrong audience even when the code works as intended. The article's proposed answer is environment-level control over what employees can connect to, what their apps and agents can do, and how that work is monitored once running.

Read the original at The Hacker News ↗