Oswell Ops
Threats & Incidents
Track AI security incidents, response playbooks, blast radius, ownership, and evidence timelines.
Open Incidents
4
2 contained
Critical Incidents
1
Contained
Mean Time To Contain
11m
3m faster
Response SLA
98%
No breaches
Evidence Bundles
37
12 new
Playbooks
9
8 ready
Incident Trend
Incident Areas
Active Response Timeline
Signal correlated across MCP authorization, agent run, and approval logs. Policy engine blocked execution and isolated tool lease. Security owner assigned with response playbook attached. Remediation task queued for least-privilege permission review.
Response Playbook
ContainmentComplete
EradicationIn Review
RecoveryPending
Blast Radius
Agents2
Tools1
Data Stores0
U Unauthorized Tool Execution Blocked Refund execution was blocked because approval context was missing. | Critical | Finance Approval Agent | MCP Tooling | Containment | Amit Kapoor | Contained | Aug 17, 2026 09:12 | 14m left | ||
M Memory Poisoning Attempt Persistent memory write was quarantined and linked to an external user message. | High | Customer Support Agent | Memory | Eradication | Priya Nair | Contained | Aug 17, 2026 08:45 | 42m left | ||
P Prompt Injection in Retrieved Context Retrieved context attempted to change answer constraints. | High | Research Agent | Context | Review | Neha Sharma | Open | Aug 17, 2026 08:22 | 1h 5m left | ||
E Excess Privilege Finding Unused vendor read permission needs removal from agent identity. | Medium | Invoice Validation Agent | Identity | Remediation | Rahul Verma | Open | Aug 16, 2026 18:10 | 6h left | ||
U Unauthorized Tool Execution Blocked Refund execution was blocked because approval context was missing. | Critical | Finance Approval Agent | MCP Tooling | Containment | Vikram Singh | Contained | Aug 17, 2026 09:12 | 14m left | ||
M Memory Poisoning Attempt Persistent memory write was quarantined and linked to an external user message. | High | Customer Support Agent | Memory | Eradication | Meera Joshi | Contained | Aug 17, 2026 08:45 | 42m left | ||
P Prompt Injection in Retrieved Context Retrieved context attempted to change answer constraints. | High | Research Agent | Context | Review | Arjun Patel | Open | Aug 17, 2026 08:22 | 1h 5m left | ||
E Excess Privilege Finding Unused vendor read permission needs removal from agent identity. | Medium | Invoice Validation Agent | Identity | Remediation | Rohit Mehta | Open | Aug 16, 2026 18:10 | 6h left | ||
U Unauthorized Tool Execution Blocked Refund execution was blocked because approval context was missing. | Critical | Finance Approval Agent | MCP Tooling | Containment | Sneha Iyer | Contained | Aug 17, 2026 09:12 | 14m left | ||
M Memory Poisoning Attempt Persistent memory write was quarantined and linked to an external user message. | High | Customer Support Agent | Memory | Eradication | Data Team | Contained | Aug 17, 2026 08:45 | 42m left |
Showing 1 to 10 of 24 records