Anthropic names the two agent controls builders skip

Anthropic's CISO guide pairs a proxy allowlist and an org-wide kill switch with five identity and logging controls.

The guide names seven controls total. Two of them, Anthropic says, are the ones solo builders and small teams skip when there's no security team reviewing the deployment first.

The other five read like a checklist: identity tied to an IdP with SCIM, admin-set connector allowlists, and approval gates before a tool runs. Sandboxed execution without production credentials and OpenTelemetry logging to a SIEM round out the list. The rest reads as a procurement checklist a security team could hand a vendor as written, per Anthropic's CISO guide.

The other two take actual engineering, not procurement. A proxy sits in front of every outbound request from the agent's environment and checks it against an approved destination list before letting it out. And one toggle disables every connector across every user at once.