Introducing Sysdig AI Defense: See, Stop, and Prove What Agents Do
Sysdig, Wednesday, November 4th, 2026
Sysdig launches AI Defense, runtime security and governance that discovers AI agents and can confirm, block or kill their actions.
Sysdig announced Sysdig AI Defense, runtime security and governance for AI agents from developer laptops to the cloud, built on the same runtime engine, sensor codebase and Falco rules as its cloud workload protection.
It discovers the agents, MCP servers, skills and plugins in use, including unapproved ones, and ties each to an account and person.
Administrators set policies for specific actions, choosing to confirm, block or kill the process, while unlisted activity runs as normal.
Every observed action is recorded in the Sysdig tenant off the device, where the agent cannot alter it, and Sysdig says it does not collect prompts by default.