> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hiddenlayer.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Agent Harness Security

Agent Harness Security extends Runtime Security to protect AI coding agents on the developer workstation. It gates the agent at each risky step of a session (prompt submission, tool calls, tool results, shell and MCP execution, and file reads) and applies the same security policy that governs your other AI traffic. The same project policy decides the outcome at each step: block the action, redact sensitive content, or detect and record it for investigation. By evaluating behavior across the agent session, not just individual actions, HiddenLayer identifies the combinations that turn otherwise benign activity into an attack.

With Agent Harness Security securing AI coding agents, organizations can:

* **See what AI coding agents are doing in the codebase**

  * Follow coding agent activity from the prompt that started the task through the files opened, commands run, dependencies installed, code changed, and pull requests prepared.
  * Security and AppSec teams get the session context they need to investigate behavior quickly.

* **Catch threats inside the development workflow**

  * Detect prompt injection embedded in source files and tool outputs, secrets flowing into AI tool calls, unsafe command execution, malicious or unexpected dependency installs, and obfuscated payloads designed to evade review.

* **Keep developers moving while reducing risk**

  * Redact secrets before they reach the model, where the platform supports it. Instead of blocking the entire interaction, redaction removes the sensitive content in place and lets the agent continue on its task.
  * Where block-only enforcement would interrupt a long-running CI/CD pipeline and force a developer to step in, redaction lets the agent continue safely and preserves the productivity gains AI coding agents were brought in to deliver.

* **Trust what is actually enforced**

  * Get clear reporting on which controls are active for each coding agent and what level of enforcement each platform supports.
  * Security teams can see whether an action was detected, redacted, blocked, or limited by the underlying agent platform.