Your AI control plane. Safely scale AI across your org. Connect, secure, and monitor AI in real time. Every MCP, skill, CLI and agent session governed.
"AI security" means something different depending on who's selling it.
Legacy infrastructure vendors are extending existing products to cover AI sessions at the network and endpoint layers. Purpose-built tools are emerging at the application layer to govern model calls and tool calls directly. Both are shipping under the same label but they don't cover the same thing.
AI security spans five layers: identity and access, endpoint and device, network and infrastructure, application and AI, and data. Traditional security tools cover the first three, but not the application and AI layer. This means they can't see prompts, tool calls, or what an agent does after a model responds.
This is where the new risk concentrates. A developer running Claude Code against a production database without hooks or an MCP gateway generates activity that never reaches the SIEM, never appears in EDR, and is invisible to every security tool in a standard enterprise stack. The agent acts, and nothing in the existing infrastructure records that it did.
The products most enterprises already own have expanded their "AI security" coverage โ but at the endpoint and network layers, not the application and AI layer where the risk actually lives.
We wrote a breakdown of all five layers and where legacy vendor coverage ends: https://t.co/N9y4vx85gl
Uber had 84% of its developers using agentic coding tools daily by early 2026. A single background agent was generating 1,800 code changes per week, used by 95% of the engineering org.
None of that was possible without AI governance infrastructure. Before they built it, engineers were connecting AI tools directly to internal services with no visibility, no authorization, and no way to trace an agent's actions back to a human. The governance layer wasn't optional. It was the prerequisite for scaling.
What they built: an LLM gateway with PII redaction on every call, an MCP gateway and registry across 10,000+ internal services, and an agent identity system that cryptographically attests every participant in a multi-agent workflow. Three layers, handling 60,000 agent task executions per week.
What it cost: years of platform engineering, a dedicated Agentic AI Platform team, and deep integration with infrastructure most companies don't have. They extended an existing SPIRE deployment, an existing authorization service, and their own inference stack. These foundations took years to build before AI was even relevant.
Uber proved the architecture works. They also proved it takes a significant fraction of a platform engineering org to build it from scratch.
The Speakeasy AI control plane is that same architecture, available as a product. The four problems Uber's multi-year investment was designed to solve (governed MCP access, user-scoped agent identity, real-time data protection, and auditable logs on every interaction) are the four problems we solve out of the box.
We wrote more on this here: https://t.co/xV5Cfuxv2I
Before you roll agents out across a company, you have to be able to answer three questions: what is the agent reading, what is it connected to, and what data can it move.
This month we shipped the features that answer them, expanding the security layer of the Speakeasy AI control plane.
โ ๐ฃ๐ฟ๐ผ๐บ๐ฝ๐ ๐๐ป๐ท๐ฒ๐ฐ๐๐ถ๐ผ๐ป ๐๐ฒ๐๐ฒ๐ฐ๐๐ถ๐ผ๐ป: catch malicious instructions hidden in anything your agent reads, before they execute
โ ๐ฆ๐ต๐ฎ๐ฑ๐ผ๐ ๐ ๐๐ฃ ๐๐ฒ๐๐ฒ๐ฐ๐๐ถ๐ผ๐ป: every MCP server mapped to its real endpoint and checked against your approved list at session start
โ ๐ ๐๐ฃ ๐ฆ๐ฒ๐ฟ๐๐ฒ๐ฟ ๐๐ฝ๐ฝ๐ฟ๐ผ๐๐ฎ๐น ๐ช๐ผ๐ฟ๐ธ๐ณ๐น๐ผ๐๐: one-click access requests, approve org-wide or project-wide, policies inherited automatically
โ ๐๐ฎ๐๐ฎ ๐๐ผ๐๐ ๐ฃ๐ฟ๐ฒ๐๐ฒ๐ป๐๐ถ๐ผ๐ป: detect secrets, PII, financial, and healthcare data, and flag or block it before it leaves the session
Every check runs in real time, on every message in and out of your agents. More to come.
Roughly every decade, a new layer of enterprise infrastructure transitions from "early adopters only" to "you're behind if you don't have this."
The transition usually happens faster than most organizations predict, and the catch-up cost for late movers is higher than the investment would have been earlier.
Cloud is the clearest recent example. In 2016, running compute on your own servers was still normal. By 2020, the absence of a cloud strategy being well underway was a major red flag. The teams that waited for the transition to be obvious paid more to catch up than the ones that moved when the signal was clear but not yet loud.
The AI control plane is in a similar early window. The case for it is clear to organizations running AI agents in production. Most have no consistent way to connect every AI tool to the systems that matter, control who can use what, secure what flows through, or observe whether the investment is even working. Those are the four functions of the control plane, and without them, enablement and governance stay in permanent tension.
The difference from the cloud transition is that the forcing function isn't gradual operational pressure. It's usually a specific security or compliance event.
Which means organizations don't see it coming until it arrives.
We wrote about what this transition looks like and why the timing matters here: https://t.co/Qickm4IKyI
The organizations that deployed an LLM gateway two years ago made the right call.
Having a centralized proxy for model calls, unified credential management, and cost logging across providers was the right infrastructure for what they were running.
The surface has since expanded. Agentic workflows, MCP, coding assistants generating shell commands and file edits, background agents running scheduled jobs against production APIs: the LLM gateway only sees pieces of it.
The gateway still does what it always did. It just covers a shrinking fraction of what's actually happening.
The common progression we see is gateway first, MCP governance when the tool-call blind spot becomes painful, identity because policy without attribution isn't enforcement, then a shared policy foundation to make the components function as a system.
That sequence works. It just takes 18 months and a few incidents to get there.
We want to help organizations skip the progressive discovery of each gap and get to full coverage directly.
We are deeply honored to accept the award for Most Confusing AI Billboard in San Francisco! ๐
Honestly, with the level of competition this year, we never thought weโd win. The other nominees had experience, large budgets, and, in some cases, actual marketing teams.
Claude Code, Cursor, Codex, and VS Code Copilot all expose dozens of hook events. But if you're standing up AI governance this quarter, you only need to know about four hooks that will be the basis of your AI governance posture
1. UserPromptSubmit. Fires when a developer submits a prompt. Scan for secrets pasted out of .env files. Redact PII before it hits the model. This is your inbound chokepoint.
2. PreToolUse. Fires before any tool call executes. Block dangerous shell commands. Gate MCP calls. Scope file writes. This is your outbound action control.
3. PostToolUse. Fires after a tool returns its result. The command might be fine. The output might not be. cat .env is harmless. What comes back is the exfiltration risk. This is response auditing.
4. SessionEnd. Fires when the agent finishes. Ship the full transcript to a central store. "Find every session that touched the customer database last quarter" becomes a query, not a forensic investigation.
Start with these four. Wire them into a central event feed. Everything else is an optimisation on top of a foundation that already works.
We are deeply honored to accept the award for Most Confusing AI Billboard in San Francisco! ๐
Honestly, with the level of competition this year, we never thought weโd win. The other nominees had experience, large budgets, and, in some cases, actual marketing teams.
In our latest video, @dagsen scours the great city of San Francisco looking for its most confusing AI billboard. Then he gives the winner a trophy.
00:26 The rules
00:48 Telnux
01:12 The tier breakdown
01:34 Lambda, Slash, Omneky
02:15 Asking the public
02:46 Framer
03:09 Campfire
03:43 Atlassian Rovo, ChatGPT, and Codex
04:30 Asking the public about Vercelโs billboard
05:07 SFโs gold rush history and Google Gemini
05:42 Replit
06:03 Airwallex
06:22 Vanta
06:37 Apollo
07:08 Corgi
07:31 Stripe
07:58 Speakeasy
08:24 Mercury
08:40 Deel
08:57 Asking the public about Graphite
10:18 https://t.co/9mAE9NVgVM
10:37 Awarding our Most Confusing trophy
In our latest video, @dagsen scours the great city of San Francisco looking for its most confusing AI billboard. Then he gives the winner a trophy.
00:26 The rules
00:48 Telnux
01:12 The tier breakdown
01:34 Lambda, Slash, Omneky
02:15 Asking the public
02:46 Framer
03:09 Campfire
03:43 Atlassian Rovo, ChatGPT, and Codex
04:30 Asking the public about Vercelโs billboard
05:07 SFโs gold rush history and Google Gemini
05:42 Replit
06:03 Airwallex
06:22 Vanta
06:37 Apollo
07:08 Corgi
07:31 Stripe
07:58 Speakeasy
08:24 Mercury
08:40 Deel
08:57 Asking the public about Graphite
10:18 https://t.co/9mAE9NVgVM
10:37 Awarding our Most Confusing trophy
We built @dubdotco to be agent-friendly from the get-go:
โฆ Markdown-friendly API docs (h/t @mintlify)
โฆ AI-powered support center
Today, we're taking this to the next level with the launch of our official MCP server โย powered by @speakeasydev ๐ฅณ
@LaunchDarkly launched AgentControl today: runtime control for AI agents in production, with configuration changes that propagate in under 200ms, fast enough to reroute a model or trigger a fallback mid-conversation.
LaunchDarkly partnered with Speakeasy to build the MCP server that lets AI agents interact with AgentControl programmatically: creating flags, configuring targeting rules, managing rollouts. The same workflows human developers rely on, now accessible to agents.
What surprised them was how quickly it became useful internally. Their own engineers started using it daily to clean up stale flags accumulated over years. What was scoped as a customer-facing product became infrastructure for their own team.
Benjamin Woskow, their Senior Director of Engineering, said their takeaway was that building the MCP server wasn't the hard part. Keeping it production-grade as the protocol evolves is where the overhead accumulates. Speakeasy owns that layer so they don't have to.
The full story: https://t.co/F4bQl0X3Xl
11/10 would recommend @speakeasydev as well ๐ฏ
We were actually one of the earliest Stainless beta testers at @dubdotco, but ended up switching to Speakeasy for several reasons:
1. Generated SDKs were of much better quality
2. Supreme DX & docs
3. World-class support from the team
Switch to Speakeasy today, your engineers/users will thank you ๐ช
Speakeasy is a no brainer.
We absolutely love everything they do and worth every penny we pay them each year.
Shoutout to @sagar_batchu and the whole crew.