Agentic Control for Software Engineers
An enterprise-grade control layer on top of coding agents, keeping engineers in control without giving up the speed of auto-approval.
Read the post
Blog
SaaS is dead. But not because AI "killed" it, because AI killed it.
SaaS is dead, and vibe coding killed it from within. Why today's coding agents are built for vibe coders, not the software engineers who actually pay for them.
Aviv Carmi · 6 min read
Who is profiling whom: what attackers fear about AI correlation
A Russian-language cybercrime thread shows attackers fragmenting malicious work across models and accounts to slip past per-request AI controls — and fearing the one thing that defeats it: correlation across behavior, identity, and context.
Amir Shaked · 3 min read
Angry Bear: Enforcing the Skills Your Coding Agent Keeps Forgetting
Angry Bear is Bluebear's open-source pre-tool-use hook that blocks AI coding agents from editing files until the required skills are loaded, turning 'please follow the conventions' into a precondition. MIT, works with Claude Code and Cursor.
Orr · 6 min read
Bear Metal: The Coding Agent We Point at Our Own Backlog
Bear Metal is Bluebear's open-source background coding agent: it works tickets delegated through Linear and opens pull requests through your GitHub App installation.
Aviv · 5 min read
The mandate gap: the agent risk your security stack can't see
Coding agents introduce a new class of risk: the gap between what a user authorized and what the agent actually did. Why your existing controls miss it, and how to govern intent instead of just actions.
Ido · 6 min read
The Missing Dependencies Hidden Inside AI Agent Skills and Plugins
We found 72 exported AI agent skills and plugins referencing package names that do not exist, creating an opening for slopsquatting attacks across npm, PyPI, and Cargo.
Noam · 6 min read
Baloo: The Code Reviewer We Built for Our Own Agents
Baloo is Bluebear's open-source GitHub App for self-hosted AI pull request review, built from the agent we used to review our own agent-generated code.
Amir · 4 min read
The Hidden Git Branch That Leaked 20,000+ AI Coding Sessions
While tracing the source of an AI coding-agent dataset, we found 20,000+ agent sessions exposed through public Git branches, including API keys, credentials, infrastructure details, and screenshots.
Noam · 5 min read
It's Not What the Model Writes. It's What the Agent Runs.
Recent threat intelligence details how cybercriminals are using headless coding agent frameworks on compromised hosts to automate source code exfiltration.
Ido · 3 min read
The Hidden Attack Surface Inside Every Coding Agent
Most teams still talk about coding agents as if they're just LLMs that write code. That misses the real security picture.
Ido · 2 min read
The Credentials Your AI Agent Sees (And Why You Should Care)
AI agents increasingly need credentials to act on our behalf, and by doing that are quietly turning local configuration files and shell profiles into a secondary, high‑risk credential store. That creates a new security boundary, a phenomena we call context‑window credential drift
Ido · 9 min read
The Coding Agent Ecosystem Is Now a Target
Attackers aren't just targeting what coding agents do — they're going after the entire ecosystem around them. InstallFix is only the latest example.
Ido · 4 min read