The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
Stopping Shadow AI: Practical Steps for Securing Autonomous Agents
AI agents are proliferating, acting with significant access, often undetected. This article explains how to identify, govern, and secure these autonomous systems before they become major liabilities.
SOC 2 Type I vs. Type II: What Your First Enterprise Deal Actually Needs
As a SaaS founder or engineering lead, securing your first enterprise deal hinges on trust. Learn whether a SOC 2 Type I or Type II report is the right move for your initial client requirements.
When Legitimate Drivers Go Rogue: Defending Against EDR Evasion
The recent Lunex Stealer campaign, leveraging legitimate AMD drivers to disable EDR, highlights a critical shift in attacker tactics. We need to evolve our defenses beyond signature-based detection and focus on deeper system integrity.
AI Agents and the Silent Data Stream: Why Your AI Tools Might Be Leaking Data
A recent incident involving a major AI developer highlights how automated AI agents can unintentionally exfiltrate sensitive data, underscoring critical security gaps.
When a Zero-Day Forces Your Hand: Lessons from the Kiteworks Shutdown
A recent urgent server shutdown request by Kiteworks highlights the critical need for proactive threat intelligence and robust incident response planning for every organization. This isn't just about large enterprises; it's about preparing your SMB for the unexpected zero-day.
Why Vexta's Findings Never Leave Your Machine
Vexta stores every scan, finding and asset in a local database on the machine it runs on, with no findings sent to a cloud backend, so client data stays where it was collected.
Deploying Vexta on an Air-Gapped or Offline Network
Vexta runs as a single self-hosted binary with modest hardware needs, and its core scanning features do not depend on internet access, making it practical to run on an air-gapped or segmented network.
Automating Vexta with Its REST API: Jobs, Scans and Assets
Vexta exposes a REST API under /api/v1/ to create scans, poll job status, pull scan data and assets, and trigger AI insight or takeover verification, so scanning can be driven from your own tooling.
How Vexta Keeps an Authorized Scan Polite and In Scope
Vexta routes every request through a centralized HTTP client with adaptive rate limiting, jitter and scope enforcement, so scans stay gentle on the target and every request is logged.