Cynative Ships an Open-Source Deep-Research Security Agent With Default-Deny Write Permissions

IT Security News·low signal

Cynative launched July 13 as an open-source security research agent that operates against live cloud accounts but ships with a default-deny write policy, so it can investigate autonomously without the blast radius of making damaging changes unless explicitly escalated. It's a useful reference implementation of least-privilege / blast-radius design for agents running in production infrastructure; coverage is currently single-source pending independent confirmation.