Three independent agent runtime security projects shipped within two weeks: Microsoft's Agent Governance Toolkit (MIT license, 7 packages across Python/TS/Rust/Go/.NET, covers all 10 OWASP agentic AI risks at sub-0.1ms p99 latency), Capsule Security's platform with ClawGuard (funded $7M, disclosed CVEs in Copilot Studio and Agentforce), and an open-source Show HN project. The convergence marks runtime agent security as a distinct, investable category — not just a feature of existing security products.
2026-04-14 / AGENTSMicrosoft Releases Agent Governance Toolkit: First Open-Source Framework Covering All 10 OWASP Agentic AI RisksMicrosoft open-sourced the Agent Governance Toolkit under MIT license on April 2, a seven-package system (Python, TypeScript, Rust, Go, .NET) that provides sub-millisecond deterministic policy enforcement against all 10 OWASP Agentic Top 10 risks including goal hijacking, tool misuse, memory poisoning, and rogue agents. The toolkit includes Agent OS (policy engine intercepting every agent action), Agent Mesh (agent-to-agent communication security), Agent Runtime (dynamic execution rings), and Agent SRE (reliability engineering). This is the first toolkit to address the full OWASP agentic taxonomy with deterministic enforcement rather than heuristic detection. 2026-04-03 / AGENTSMicrosoft Releases Agent Governance Toolkit: Open-Source Runtime Security Covering All 10 OWASP Agentic AI RisksMicrosoft open-sourced the Agent Governance Toolkit under MIT license on April 2, comprising seven packages (Agent OS, Mesh, Runtime, SRE, Compliance, Marketplace, Lightning) that enforce runtime security policies on autonomous AI agents at sub-millisecond latency (<0.1ms p99). It is the first toolkit to address all 10 OWASP agentic AI risks with deterministic policy enforcement, integrating with LangChain, CrewAI, OpenAI Agents SDK, and Microsoft Agent Framework without code rewrites. The toolkit ships with 9,500+ tests, supports Python/Rust/TypeScript/Go/.NET, and includes decentralized identity (DIDs with Ed25519) and dynamic trust scoring for inter-agent communication.