Question 1

What is forward-deployed security for AI, and how does Wingback deliver it?

Accepted Answer

AI moves too fast for off-the-shelf controls and quarterly engagements. New agents, new MCP servers, and new attack patterns appear every week. Forward-deployed security applies the forward-deployed engineer model to AI security: engineers embedded directly with your team, with detection and integration tuned to your actual stack. Slack channel, joint oncall, hands-on policy tuning, and new agents wired into your security posture in days rather than procurement cycles.

Question 2

What does Wingback actually control?

Accepted Answer

We control agent actions: tool/MCP calls, identity usage, and sensitive data access, both before and during execution. Not just what an agent says, but what it does.

Question 3

Is this just prompt filtering?

Accepted Answer

No. Prompt analysis is one input. The bulk of our value is runtime behavior control: which tools an agent calls, which identities it assumes, which data it touches. We focus on actions, not text alone.

Question 4

What types of agents and tools does Wingback cover?

Accepted Answer

All major agent frameworks (LangChain, CrewAI, AutoGen, OpenAI Agents), plus MCP servers, hosted models (OpenAI, Anthropic, Google, Mistral), IDE assistants (Claude Code, Cursor, Copilot), and custom agents via our SDK.

Question 5

Can it stop prompt injection and jailbreaks?

Accepted Answer

Yes. We catch injection through multi-signal correlation (pattern detection, exfil intent, scope violations, behavioral drift), not just text matching. Most attacks ride downstream actions; that's what we block.

Question 6

How does Wingback handle agent-to-agent delegations?

Accepted Answer

We trace chain-of-custody across every delegation and tool call, so a multi-step workflow bridging three agents still has a single auditable thread. Privilege escalation in handoffs is a first-class detection.

Question 7

Do you block actions or only alert?

Accepted Answer

Both. Monitor-only mode for discovery and tuning; enforce mode to block policy violations in real time. Most teams start with monitor, then promote rules to enforce as confidence builds.

Question 8

How do you integrate with our agent frameworks?

Accepted Answer

Lightweight SDKs for major frameworks, API gateways for LLM providers, an MCP gateway proxy, and cloud connectors for discovery. The forward-deployed team wires it to your exact stack, including in-house frameworks.

Question 9

How long does deployment take?

Accepted Answer

Visibility lands in days, not quarters. Most teams have inventory and monitor-mode running in under a week, with enforcement live on the highest-risk paths in week two or three.

Question 10

Does it work with our existing SIEM and SOC tools?

Accepted Answer

Yes. Native integrations with Splunk, Datadog, Snowflake, Chronicle, and standard SIEM webhooks. Every event ships structured so it slots into your existing detection-and-response pipeline.

Question 11

How do you handle third-party model and MCP risk?

Accepted Answer

We maintain a continuously updated model and MCP intelligence registry covering security scores, capability profiles, known vulnerabilities, and scope risks. The policy engine gates which models and MCP servers your agents can use, and under what conditions.

Question 12

Where does our data live? What does Wingback see?

Accepted Answer

Customer data stays in your environment. Wingback's data plane deploys in three modes: (1) managed SaaS in our AWS regions (us-east-1, us-west-2, eu-west-1; APAC on request), (2) dedicated single-tenant in your hyperscaler of choice (AWS, GCP, or Azure), or (3) self-hosted in your own VPC via Helm chart. In all modes, sensitive payloads stay inside your network boundary. The Wingback control plane receives only structured metadata, traces, and policy events; raw prompts, completions, and tool outputs are inspected inline and either dropped, redacted, or retained per your policy. Encryption-at-rest uses customer-managed KMS keys for self-hosted and dedicated deployments; managed SaaS uses per-tenant CMKs. Retention is configurable from 7 days to 7 years with tamper-evident audit trails. Wingback is SOC 2 Type II certified, ISO 27001 certification in progress, and ISO 42001-mapped. DPAs and right-to-audit clauses are standard in our enterprise agreements.

See Wingback in action.

See it on your stack

The full control plane, in one pass.