Waratek unveils new product that applies proven immutable-rule runtime protection to AI agents, blocking attempts to abuse an agent’s behavior
Waratek, the leader in runtime application security, today announced at Oracle AI World the launch of Waratek AI Phylax, a new product that protects Java-based AI agents from application attacks while they run. Named for the ancient Greek word for guardian, Waratek AI Phylax stands watch over every AI agent’s execution. By enforcing immutable security rules inside the runtime, AI Phylax helps prevent AI agents from becoming another attack surface for application security vulnerabilities with no disruption to legitimate AI agent behavior.
Every organization deploying AI agents is asking the same question: How do we stop someone from taking control of them?”
— Doug Ennis, Waratek Chair and CEO
“Every organization deploying AI agents is asking the same question: how do we stop someone from taking control of them?” said Doug Ennis, Waratek Chair and CEO. “With Waratek AI Phylax, the answer is simple. The agent does what it was built to do, and nothing else. If anyone tries to change that, the attempt is blocked in the runtime before any compromise.”
Also Read: CIO Influence Interview with John Elliott, Cybersecurity Author Fellow at Pluralsight
AI agents are moving from pilots into production, where they have access to sensitive data and tools, read emails, query databases, call APIs and act on behalf of employees and customers. That autonomy makes them a new target. Attackers no longer need to breach the application itself; they can hide instructions in a document, a web page or a tool response and trick the agent into doing something it was never meant to do.
Prompt injection, tool hijacking and goal manipulation all share one aim: to alter the agent’s operation. Filters that try to spot malicious text are probabilistic and can be evaded with new phrasing. Security teams need deterministic security controls that do not guess.
Built on Waratek’s runtime expertise
AI Phylax builds on Waratek’s unique expertise in blocking attacks inside the runtime with accurate detection, the same approach enterprises already rely on to protect business-critical applications. Any attempt to alter the agent’s operation is stopped at the point of execution, regardless of how the attack is worded or where it came from. The result is deterministic protection: the same security rule produces the same outcome every time.
Catch more CIO Insights: How Are CIOs Aligning Technology with Workforce Agility?
[To share your insights with us, please write to psen@itechseries.com ]
