Underneath the Agent
Notes from the team building a real-time, dynamic sandbox for AI agents.

Your Agents Need a Dynamic Sandbox
Block an AI agent from the GitHub API, and it will try curl. Block curl, and it will write a Python script and run that instead. That’s the problem with most agent sandboxes today: they’re static. Your security team writes the rules upfront before an agent runs, and the agent spends the session finding paths around the static guardrails that have been set.

Introducing DevTools: Chrome-style Network Tab for Your Linux Server
We built a browser-based debugging tool that shows live http/s traffic on production servers. No proxies, no certificates, no code changes. Just the visibility we always wished we had.


The Heisenberg Horror: Why Debugging Tools Make Bugs Disappear
Production bugs that vanish when you try to debug them. Learn why traditional debugging tools change what they observe and how to catch Heisenbugs with unmatched visibility.


Built to Integrate: Why Qpoint's Modular Architecture Matters
Most security vendors force you into all-or-nothing adoption. Learn why Qpoint's modular architecture (QTap, QPlane, QScan) gives you unmatched visibility with complete flexibility over data storage, deployment, and integration.


What Your AI Assistant Can't See (And How to Fix It)


Are You Watching What's Leaving Your Network?


The Hidden Complexity of External Dependencies - How Qpoint Solves a Cloud-scale Problem


The CISO's Checklist - What Your Current Tools Can't Tell You


The M&A Due Diligence Black Box: Why Technical DD Takes Weeks (And How to Get It Done in Days)


How eBPF-Based Egress Monitoring Would Have Caught the Shai-Hulud npm Worm in Real-Time


The Encryption Paradox


Why Running Qtap in Production is Safe - A Deep Dive into eBPF and Privilege Boundaries


The eBPF Verifier - How Linux Safely Runs User Code in Kernel Space


The Impossible Proxy - An Egress Journey


Security Observability for the Encrypted Cloud


A Story About Missing Context


Qpoint Achieves SOC 2 Type II Compliance


The Truth is on the Wire


New Year, New User Experience!


The Hidden Risks of Third-Party API Dependencies


Uncovering the Hidden Footprint of Your Third-Party API Integrations


Turning Blind Spots Into Visibility and Insights for SRE Teams


Qpoint Closes Pre-Seed Funding and Launches eBPF-based Monitoring and Control for External APIs and Services

What is eBPF?


What's the difference between my APM tool and eBPF-powered QPoint?


Conquering the Hidden Challenges of External Service Integrations


Lessons in Reliability: Rishi Goomar's Journey from Dev to SRE


Tap Into Your External API Traffic with eBPF


Managing External Integrations in Production Environments


Mitigating Software Supply Chain Risk with Qpoint


Improving Platform Reliability with Qpoint


Managing External API Dependency Risk


How We Use Middleware


Why Securing Egress Traffic Matters


Meeting Regulatory Compliance Requirements for Your External Integrations
