agent-incident-response

What problem does it solve?

Provides a structured, phased approach to contain, investigate, recover from, and harden AI agent security incidents, reducing blast radius and preserving evidence across the workflow.

Core Features & Use Cases

• Containment guidance: terminate or isolate affected sessions and limit further impact.
• Forensics and timeline: establish evidence collection, scope, and root-cause analysis.
• Recovery and hardening: rotate credentials, audit MCP configs, rebuild baselines, and apply post-incident safeguards.
• Runbook and reporting: generate incident reports and update runbooks to prevent recurrence.

Quick Start

Initiate immediate containment and start forensic logging to begin the incident response workflow.