Fetching from the wire…
01
02
03
04
05
06
07
08
Public story · 2026-07-19 · high
The guide's seven controls include a proxy allowlist for outbound traffic and one switch that kills every connector at once.
Why now: Anthropic's CISO guide is the agentic AI security reading getting attention as of July 19.
Anthropic's CISO guide pairs a proxy allowlist and an org-wide kill switch with five identity and logging controls.
The guide names seven controls total. Two of them, Anthropic says, are the ones solo builders and small teams skip when there's no security team reviewing the deployment first.
The other five read like a checklist: identity tied to an IdP with SCIM, admin-set connector allowlists, and approval gates before a tool runs. Sandboxed execution without production credentials and OpenTelemetry logging to a SIEM round out the list. The rest reads as a procurement checklist a security team could hand a vendor as written, per Anthropic's CISO guide.
The other two take actual engineering, not procurement. A proxy sits in front of every outbound request from the agent's environment and checks it against an approved destination list before letting it out. And one toggle disables every connector across every user at once.
Each link below shares sources, entities, or timing with this story.
Anthropic released Claude / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude); both cover Anthropic, OpenTelemetry; overlapping topics (agent, control, execution).
Linked by a graph relationship (Anthropic released Claude); both cover Anthropic, IdP; overlapping topics (admin, connector, control).
Anthropic released Claude / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Anthropic released Claude); both cover Anthropic, SCIM; reported by the same outlet (claude.com).
Anthropic released Claude / Shared entity: Anthropic / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released Claude); both cover Anthropic; overlapping topics (agent, block, egress, proxy).
Opus built by Anthropic / Shared entity: Anthropic / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Opus built by Anthropic); both cover Anthropic; reported by the same outlet (claude.com).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover Anthropic, OpenTelemetry; overlapping topics (agent, approval).
Anthropic released MCP / Shared entity: OpenTelemetry / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released MCP); both cover OpenTelemetry; overlapping topics (admin, agent, credential).
Anthropic released Claude / Shared entity: Anthropic / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Anthropic released Claude); both cover Anthropic; overlapping topics (agent, control).