Cequence Blog

Field notes on defending apps and governing agents

Research, analysis, and practitioner perspective on bot defense, API security, and AI agent governance, from the team reading behavior across 10 billion interactions a day.

Why the Security Controls Built Into LLMs Aren't Enough

LLMs have some controls built in, but by design those controls are insufficient. Learn why the Cequence AI gateway is essential.

June 10, 2026

When the Token Theft Hides in Plain Sight: Why Agent Containment Stops the Claude Code MCP Attack

A malicious npm package hijacks Claude Code MCP traffic to steal OAuth tokens. The Cequence AI Gateway removes the payoff so the attack comes up empty.

June 9, 2026

About Cequence

The Market Arrived. We Were Already Here: Cequence Posts Record Quarter on Surging Agentic AI Security Demand

Cequence posts its strongest quarter on record, driven by surging agentic AI security demand across financial services, telecom, and technology sectors worldwide.

June 8, 2026

Bot Management

The Success Penalty: Why Bot Defense Pricing Is Breaking

AI-driven abuse is breaking bot defense pricing. See why traffic-based meters penalize success and what a value-aligned model looks like.

June 3, 2026

CQ Prime Threat Research

2026 Verizon DBIR: AI Bot Threats vs. API Layer Attacks

AI bot traffic is surging—but API layer attacks from residential proxies are the realthreat. Here's what the 2026 Verizon DBIR data actually shows.

June 2, 2026

Agents are the new channel. Behavior is still the only signal that matters.

Agentic AI security starts with identity but depends on behavior. See why watching what agents do at runtime is how you let them in safely.

June 1, 2026

A Reference Architecture for Containing Agents: What Cequence Built and Anthropic Arrived At Independently

Anthropic published how it contains its own agents. Detection and short-lived tokens miss the real boundary: what the agent does once it is inside.

May 31, 2026

What Happens When Your Entire Company Learns AI Together? We Found Out.

Cequence ran a company-wide AI hackathon where every team built real agents—and deployed them through our own AI Gateway.

May 27, 2026

Agentic AI Does Not Mean Abandoning Zero Trust

Agentic AI doesn't break Zero Trust -- it demands more of it. Learn how AI gateways, behavioral identity, and runtime enforcement extend Zero Trust to autonomous agents.

May 26, 2026

CQ Prime Threat Research

What the Verizon 2026 DBIR says about bots, APIs, and the AI threat surge

The 2026 Verizon DBIR reveals surging AI bot traffic, persistent web app attacks, and agentic AI risks. Here's what security teams need to act on now.

May 18, 2026

Least Privilege Access for AI Agents: The Control You're Missing

Authentication isn't enough for AI agents. Learn how least privilege accesscontrols reduce blast radius and improves performance.

May 11, 2026

Encoded Prompt Injection: Why LLM Guardrails Are at the Wrong Layer

A $175K crypto theft via Morse code proves LLM-layer defenses can't stop encoded prompt injection. The fix belongs at the action layer, not model layer.

May 7, 2026

Bot Management

How a Leading Telecom Slashed Account Takeovers by ~75% — Without Changing a Line of App Code

A leading telecom cut account takeovers by ~75% in under four weeks using Cequence behavioral intent detection — no app changes required.

May 5, 2026

Why Enterprises Need an MCP Gateway, Not Native Connectors

Native MCP connectors create ungoverned sprawl. See why an AI gateway gives teams needed observability, control, and behavioral guardrails.

April 29, 2026

LLM Proxies vs. MCP Gateways: What’s the Difference?

The rise of agentic AI means that solutions like MCP gateways and LLM proxies are being used more. See how they compare.

April 27, 2026

Cequence secures and governs how humans, bots, and AI agents interact with enterprise applications and data, extending zero trust from identity to action.

Platform

Platform Overview Application & API Security Agentic AI Governance

Company

About CQ Prime Research Newsroom Careers

Resources

Blog Resource Center Case Studies Get a Demo

Privacy Cookie Policy Responsible Disclosure