Skip to content
Wingback Security

Glossary

Agent Detection & Response (ADR)

Updated

The practice of detecting and responding to threats from AI agents at runtime. ADR discovers agents, watches the actions they take (tool and MCP calls, identity usage, data access), and can block, sanitise, throttle, or terminate a malicious action inline, the way Endpoint Detection & Response does for devices. It focuses on what an agent does, not only what it says.