Agentic Security: The Maturity Model — From Wild West to Locked Down | Episode 58
In this episode of BHIS Presents: AI Security Ops, the team tackles one of the most urgent — and misunderstood — problems in modern security:
How do you actually secure AI agents?
Not hypothetically. Not in theory. But in the real world — where agents have access to your filesystem, your credentials, your network… and are making decisions on their own.
The answer isn’t a single control or tool — it’s a maturity model.
From “YOLO agent with full access” to fully instrumented, controlled, and observable systems, this episode walks through a five-level maturity model for agentic security — and what it actually takes to move up each stage.
We dig into:
• Why agentic AI introduces a completely different security model
• What “Level 0” chaos looks like in real organizations
• The risks of giving agents unrestricted access to systems
• Why containment is the first real step toward security
• How sandboxing changes the risk equation
• The importance of logging, monitoring, and visibility
• Where most organizations are actually operating today
• Why skipping steps in maturity creates hidden risk
• How to think about blast radius in agent design
• What “fully enforced” agentic security actually looks like
This episode explores a critical shift in AI security: you’re not just securing models anymore — you’re securing autonomous systems.
⸻
📚 Key Concepts & Topics
Agentic Security
• AI agents with system-level access
• Autonomous decision-making and execution
• Expanding attack surface beyond prompts
Security Maturity Model
• Level 0 → Level 4 progression
• Incremental risk reduction strategies
• Why maturity matters more than tools
Containment & Sandboxing
• Limiting blast radius
• Isolating agent execution environments
• Preventing lateral movement
Monitoring & Observability
• Logging agent actions and decisions
• Detecting misuse or unexpected behavior
• Building visibility into autonomous systems
Defensive Strategy
• Designing for least privilege
• Avoiding “full access by default”
• Treating agents like untrusted users
#AISecurity #CyberSecurity #AIAgents #LLMSecurity #ArtificialIntelligence #InfoSec #BHIS #AppSec #AgenticAI
----------------------------------------------------------------------------------------------
About Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
About Bronwen Aker - https://www.blackhillsinfosec.com/team/bronwen-aker/
About Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
About Ethan Robish - https://www.blackhillsinfosec.com/team/ethan-robish/
About Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/
Click here to watch this episode on YouTube.
Brought to you by:
How do you actually secure AI agents?
Not hypothetically. Not in theory. But in the real world — where agents have access to your filesystem, your credentials, your network… and are making decisions on their own.
The answer isn’t a single control or tool — it’s a maturity model.
From “YOLO agent with full access” to fully instrumented, controlled, and observable systems, this episode walks through a five-level maturity model for agentic security — and what it actually takes to move up each stage.
We dig into:
• Why agentic AI introduces a completely different security model
• What “Level 0” chaos looks like in real organizations
• The risks of giving agents unrestricted access to systems
• Why containment is the first real step toward security
• How sandboxing changes the risk equation
• The importance of logging, monitoring, and visibility
• Where most organizations are actually operating today
• Why skipping steps in maturity creates hidden risk
• How to think about blast radius in agent design
• What “fully enforced” agentic security actually looks like
This episode explores a critical shift in AI security: you’re not just securing models anymore — you’re securing autonomous systems.
⸻
📚 Key Concepts & Topics
Agentic Security
• AI agents with system-level access
• Autonomous decision-making and execution
• Expanding attack surface beyond prompts
Security Maturity Model
• Level 0 → Level 4 progression
• Incremental risk reduction strategies
• Why maturity matters more than tools
Containment & Sandboxing
• Limiting blast radius
• Isolating agent execution environments
• Preventing lateral movement
Monitoring & Observability
• Logging agent actions and decisions
• Detecting misuse or unexpected behavior
• Building visibility into autonomous systems
Defensive Strategy
• Designing for least privilege
• Avoiding “full access by default”
• Treating agents like untrusted users
#AISecurity #CyberSecurity #AIAgents #LLMSecurity #ArtificialIntelligence #InfoSec #BHIS #AppSec #AgenticAI
----------------------------------------------------------------------------------------------
About Brian Fehrman - https://www.blackhillsinfosec.com/team/brian-fehrman/
About Bronwen Aker - https://www.blackhillsinfosec.com/team/bronwen-aker/
About Derek Banks - https://www.blackhillsinfosec.com/team/derek-banks/
About Ethan Robish - https://www.blackhillsinfosec.com/team/ethan-robish/
About Ben Bowman - https://www.blackhillsinfosec.com/team/ben-bowman/
- (00:00) - Intro: The Reality of Unsecured AI Agents
- (00:24) - The Agentic Security Maturity Model Explained
- (07:20) - Level 0: Total Chaos (Unrestricted Agents)
- (11:24) - Level 1: Containment and Basic Guardrails
- (13:24) - Level 2: Controlled Execution
- (20:32) - Level 3: Monitoring, Logging, and Visibility
- (27:00) - Level 4: Fully Enforced Agent Security
- (28:00) - Final Takeaways: Maturity Over Hype
Click here to watch this episode on YouTube.
Brought to you by:
Black Hills Information Security
☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/
Antisyphon Training
Active Countermeasures
Wild West Hackin Fest
Creators and Guests
Host
Brian Fehrman
Brian Fehrman is a long-time BHIS Security Researcher and Consultant with extensive academic credentials and industry certifications who specializes in AI, hardware hacking, and red teaming, and outside of work is an avid Brazilian Jiu-Jitsu practitioner, big-game hunter, and home-improvement enthusiast.
Host
Bronwen Aker
Bronwen Aker is a BHIS Technical Editor who joined full-time in 2022 after years of contract work, bringing decades of web development and technical training experience to her roles in editing pentest reports, enhancing QA/QC processes, and improving public websites, and who enjoys sci-fi/fantasy, Animal Crossing, and dogs outside of work.
Host
Derek Banks
Derek is a BHIS Security Consultant, Penetration Tester, and Red Teamer with advanced degrees, industry certifications, and broad experience across forensics, incident response, monitoring, and offensive security, who enjoys learning from colleagues, helping clients improve their security, and spending his free time with family, fitness, and playing bass guitar.
Guest
Ethan Robish
Ethan Robish has worked with Black Hills Information Security (BHIS) since 2008 — first as an intern and then as a full-time Security Consultant starting in 2012. In his current role as a Threat Hunter, Ethan is involved with customer engagement, research, working with Active Countermeasures’ AC-Hunter, as well as improving BHIS HTOC and SOC offerings. Previously, he implemented defensive security solutions for the Exchange Online security team as a Microsoft intern. While in college, he competed in the International Collegiate Programming Competition (ICPC) World Finals. In his time off, he enjoys cooking, playing the piano, and reading fantasy novels.