Blog
Guías de cumplimiento y seguridad
Guías prácticas y directas sobre ISO 27001, SOC 2 y cumplimiento de seguridad, y cómo automatizar lo que ralentiza a los equipos.
AI Security · August 5, 2026 · 8 min
No, an AI Didn’t “Escape the Lab” This Week — It Leaked Your API Keys
The scariest AI-security story of Black Hat 2026 isn’t a model that “went rogue.” It’s a boring credential-leak bug in the plumbing every AI agent is built on — and unlike the viral headlines, it has a tracking number, a severity score, and a patch.
Leer la guía →OKF · August 5, 2026 · 7 min
OKF for Claude: Give Claude Your Real, Current Knowledge Graph over MCP
Pasting documents into a chat is lossy, stale, and unverifiable. OKF gives Claude something better: a live, linked, cryptographically signed knowledge graph it can traverse over the Model Context Protocol — so its answers come from your real, current data.
Leer la guía →AI Security · August 4, 2026 · 11 min
The MCP CVE Wave Didn’t Crest — It Broke Wider: A Second SDK, the Vendors’ Own Servers, and the First Exploited-in-the-Wild Bug
In July we mapped the first Model Context Protocol CVE wave and argued it was becoming a category. Six weeks later the argument is settled. A second official SDK fell to the same bugs, the platform vendors shipped flawed servers of their own, and the first MCP-ecosystem flaw is now being exploited in the wild.
Leer la guía →Threat Intelligence · August 4, 2026 · 7 min
Oracle E-Business Suite Under Attack (CVE-2026-46817): A CVSS 9.8 Payments Takeover, Read Through SOC 2 and ISO 27001
ERP is where procurement, payroll, and payments live — the crown jewels, wired to the internet and patched on a slow clock. CVE-2026-46817 turns Oracle Payments into an unauthenticated takeover. The security story is obvious; the compliance story is the one most teams miss.
Leer la guía →AI Security · July 21, 2026 · 10 min
Exposed MCP Servers Are the New Unguarded Door: The July 2026 CVE Wave and How to Find Yours
The Model Context Protocol turns a language model into something that can act. In July 2026 the ecosystem shipped a dozen ways for a stranger to act through it — and the common thread wasn’t exotic. It was a server built for localhost, quietly put on the internet.
Leer la guía →AI Governance · July 14, 2026 · 9 min
The Tool Nobody Reviewed: An MCP Zero-Day Read Through SOC 2 and ISO 42001
A company with a clean SOC 2 report shipped an AI agent to production. One of its tools was missing a single line of validation — and that line was the whole audit.
Leer la guía →Engineering · July 7, 2026 · 5 min
One Connector, One Compliance Test: How We Built 428 Integrations
Most compliance tools treat integrations as a logo wall. We made each connector run a test. Here’s the engineering behind 428 vendor integrations — grounded in exactly what shipped.
Leer la guía →AI Governance · July 1, 2026 · 7 min
Prompt Guard: Stop Secrets Leaking into ChatGPT & Claude — and Prove It for ISO 42001
Your team pastes API keys and source code into AI chatbots every day. Here’s an open-source, local-first way to stop it — and to turn each blocked leak into audit evidence.
Leer la guía →AI Governance · July 1, 2026 · 6 min
Shadow AI: Your Employees Are Pasting Secrets into ChatGPT (How to Stop It in 2026)
Most “AI policy” documents are unenforced. The leak is already happening in the prompt box — here’s how to actually close it.
Leer la guía →AI Governance · July 1, 2026 · 6 min
EU AI Act Article 12: Logging & Record-Keeping Requirements, Explained (2026)
Article 12 turns “trust us” into “show us the logs.” Here’s what it requires and how to produce the evidence without a six-month project.
Leer la guía →AI Governance · July 1, 2026 · 7 min
What Is an AIMS? The ISO 42001 AI Management System, Explained
Everyone says “stand up an AIMS” — but what is it, actually? Here’s the AI Management System in plain terms, and the first control worth putting in force.
Leer la guía →ISO 27001 · June 24, 2026 · 9 min
ISO 27001 Certification Checklist (2026): 12 Steps to Certified
Everything you need to take an organization from zero to ISO 27001 certified — as a checklist you can actually work through.
Leer la guía →ISO 27001 · June 24, 2026 · 7 min
How Much Does ISO 27001 Certification Cost in 2026?
What ISO 27001 actually costs in 2026 — audit fees, tooling, training, and internal time — and where the real savings are.
Leer la guía →ISO 27001 · June 24, 2026 · 8 min
ISO 27001 vs SOC 2: Which Should You Get First? (2026)
The honest comparison — what each proves, who demands them, and why you rarely have to choose.
Leer la guía →OKF · June 27, 2026 · 6 min
What Is OKF (Open Knowledge Format)? Google’s Open Standard, Explained
The plain-English explainer on Open Knowledge Format — Google’s open standard for data that AI agents can actually read.
Leer la guía →OKF · June 27, 2026 · 6 min
OKF in AI: Giving Agents Real, Current, Verifiable Context
How Open Knowledge Format gives AI agents grounded, current, verifiable context — and why that beats dumping documents.
Leer la guía →OKF · June 27, 2026 · 5 min
OKF + Git: Version-Controlled Knowledge Graphs as Markdown
OKF is just Markdown — so it lives in Git natively. Diffable, reviewable, and auditable knowledge graphs.
Leer la guía →OKF · June 27, 2026 · 6 min
OKF vs MCP: How Open Knowledge Format and the Model Context Protocol Work Together
OKF and MCP aren’t competitors — they’re a stack. The format your knowledge lives in, and the protocol an agent uses to reach it.
Leer la guía →ISO 42001 · June 27, 2026 · 9 min
Get Your Organization ISO 42001-Ready: A 2026 Readiness Guide
What it takes to become ISO/IEC 42001-ready — the first international standard for AI management systems — as a checklist you can work through.
Leer la guía →ISO 42001 · June 27, 2026 · 7 min
ISO 42001 vs ISO 27001: AI Governance and Information Security, Compared
The honest comparison — what each standard proves, how they overlap, and why teams building AI increasingly need both.
Leer la guía →ISO 42001 · June 27, 2026 · 8 min
ISO 42001 Annex A Controls Explained: All 9 Objectives
The 38 Annex A controls, grouped under nine objectives — what each set covers and how to evidence it.
Leer la guía →ISO 42001 · June 27, 2026 · 7 min
How Much Does ISO 42001 Certification Cost in 2026?
What ISO 42001 actually costs in 2026 — audit fees, tooling, and internal time — and where the real savings are.
Leer la guía →