LogoReasonable Application Security
Authors
Subscribe
LogoReasonable Application Security
Gallery

Make better AppSec decisions in a world of AI and agents.

Chris Romeo’s weekly perspective on securing AI and agents, using AI for security, and the AppSec fundamentals that connect the two. One decision explained in plain English. A few reads with my assessment. One exercise you can use with your team. About five minutes to read. Free. Unsubscribe whenever you like.

Written by

Chris Romeo

Connect

Archive

A clean AI review still needs evidence.

Oct 13, 2026

•

5 min read

A clean AI review still needs evidence.

Turn AI security conclusions into checks your team can inspect. Plus Brook Schoenfield, AI Security Table, and the latest shorts.

Chris Romeo
Chris Romeo
Your coding agent is another privileged identity.

Oct 7, 2026

•

5 min read

Your coding agent is another privileged identity.

Claude and Codex permissions through an AppSec lens: identity, least privilege, execution boundaries, and evidence.

Chris Romeo
Chris Romeo
The Agents Took Over My Asana

Sep 29, 2026

•

3 min read

The Agents Took Over My Asana

What an issue-tracker experiment reveals about agent trust boundaries, tool permissions, verification, and runtime monitoring.

Chris Romeo
Chris Romeo
The Prompt Is Not the Trust Boundary: Reasonable Application Security #81

Sep 22, 2026

•

4 min read

The Prompt Is Not the Trust Boundary: Reasonable Application Security #81

Prompt injection is no longer just a bad prompt. Agents can find instructions anywhere they can read.

Chris Romeo
Chris Romeo
A Configured Exporter Is Not a Kill Switch

Sep 15, 2026

•

4 min read

A Configured Exporter Is Not a Kill Switch

A controlled experiment found two observability paths with different switches, payloads, and privacy profiles.

Chris Romeo
Chris Romeo
AI Made Code Cheap. Review Is the New Bottleneck

Sep 8, 2026

•

5 min read

AI Made Code Cheap. Review Is the New Bottleneck

Chris’s take, worthwhile security reads, and the latest podcast episodes.

Chris Romeo
Chris Romeo
The Agent’s Permissions Are the Security Boundary

Sep 1, 2026

•

3 min read

The Agent’s Permissions Are the Security Boundary

A practical control model for coding agents: identity, least privilege, constrained execution, and evidence you can review.

Chris Romeo
Chris Romeo
AI Changes the Pace, Not the Responsibility

Aug 28, 2026

•

4 min read

AI Changes the Pace, Not the Responsibility

A practical look at helping AppSec teams embrace AI speed while keeping human judgment and clear ownership intact.

Chris Romeo
Chris Romeo
Reasonable 🔐AppSec #76 -  Five Security Articles and Podcast Corner

Nov 12, 2024

•

6 min read

Reasonable 🔐AppSec #76 - Five Security Articles and Podcast Corner

A review of application security happenings and industry news from Chris Romeo.

Chris Romeo
Chris Romeo
...
Reasonable Application Security

Reasonable Application Security

Striving to make application security reasonable.


Home

Posts

Authors

© 2026 Reasonable Application Security.
beehiivPowered by beehiiv