TLDR: TrojAI has launched its new Defend for MCP solution, designed to secure AI agent workflows by providing real-time visibility, policy enforcement, and threat detection for the Model Context Protocol (MCP). This addresses the growing security gap in AI adoption, particularly with the rise of agentic AI and its interaction with external data and applications.
TrojAI, a specialist in AI security, has introduced its new Defend for MCP solution, aiming to fortify the security posture of AI agent workflows. The announcement, made on November 13, 2025, highlights TrojAI’s commitment to enabling organizations to adopt the Model Context Protocol (MCP) more securely, an open standard crucial for the evolving landscape of artificial intelligence.
The Model Context Protocol (MCP), initially released by AI company Anthropic approximately a year ago, serves as a universal protocol that standardizes how AI models and agents connect with and communicate across external data sources and applications. It replaces fragmented custom integrations with a unified approach for tasks such as function calls, tool utilization, and memory management. Julie Peterson, lead product marketing manager for TrojAI, emphasized MCP’s role, stating, “Acting as a coordination layer between models and their environment, MCP allows AI systems to safely interact with APIs, databases, and enterprise platforms through a consistent interface. If interoperability is the key to agentic AI, MCP is the universal translator that ensures every system speaks the same language.”
However, the rapid adoption of AI, particularly with agentic AI and MCP, has introduced significant security challenges. Lee Weiner, CEO of TrojAI, noted the widening ‘deployment security gap.’ “AI adoption has outpaced the ability to manage and secure it, creating a deployment security gap,” Weiner told MSSP Alert. He further elaborated on the unique nature of this challenge: “This is further amplified with the rise of MCP and agents. That gap is larger than what we’ve seen in prior waves, like cloud or mobile. Those technologies leveraged known architectures. AI introduces nondeterministic systems that make securing it complex, in unpredictable ways.” Weiner also pointed out the limitations of existing security tools, which “can’t ‘see’ into model behavior or prevent prompt-based manipulation, data leakage, or harmful outputs.”
TrojAI Defend for MCP is engineered to address these vulnerabilities by offering a comprehensive suite of capabilities. The solution allows organizations to discover all MCP servers within their environments and identify associated tools. It provides continuous monitoring of all MCP traffic, including prompts and responses, and is equipped to detect and prevent unauthorized changes to tool definitions, thereby mitigating risks of tampering, drift, or poisoning. Furthermore, Defend for MCP incorporates a policy engine that enables the application of MCP-specific policies, facilitating real-time inspection, auditing, and enforcement of security protocols. This strengthens governance and ensures a detailed audit trail for compliance and incident response.
Also Read:
- Legit Security Unveils VibeGuard: Revolutionizing Application Security for AI-Powered Development
- Cybersecurity Alarms Sound Over AI Agent ‘Query Injection’ Threats
Founded in 2019 and headquartered in St. John, New Brunswick, Canada, TrojAI primarily targets large enterprises, particularly within the financial services and technology sectors. Weiner underscored the strategic importance of their new offering: “With TrojAI Defend for MCP, we are enabling the adoption of agents using MCP by ensuring these advanced workflows are secure. By monitoring agentic workflows in real time in production systems, TrojAI Defend for MCP helps customers not just keep pace with new and evolving threats but get ahead of them.” He added that Defend for MCP represents an evolution of TrojAI’s core mission, simplifying and democratizing the integration of models through an agentic architecture.
