300 Agents, 60 People: How We Secured Our Own AI Agents - Aiden Sochowski, Runlayer

Runlayer is a company of about 60 people running 300+ agents every day. Founding engineer Aiden Sochowski shares what they found once they put a gateway in front of everything and logged every session and tool call: prompt injection through email, PR-review agents getting talked into approvals, over-permissioned bots, one poisoned agent contaminating others, buggy vibe-coded MCP servers burning tokens, and a model switch that raised costs over 100x in a week. Chapters: 0:00 Intro 0:25 Zero visibility into company agents 1:22 300 agents for 60 people 3:38 Example: data exfiltration through email 6:16 Attacks that unfold over a whole session 8:50 Using session data to scope agents down 10:56 One poisoned agent affects them all 12:47 Beyond security: broken MCP servers 14:08 Cost blowups from model switches 15:36 Wrap-up Aiden Sochowski https://runlayer.com Join us in SF for the second annual AIE CODE summit: https://aie.codes our last flagship summit of 2026. Applications live now!