We leverage the strength of our global team, knowing we’re more powerful together. Read news about Gen's company activities and initiatives.

Security Evangelist at Gen

Company News

Gen has a family of trusted consumer brands that for decades have helped people stay safe in the digital world. We pride ourselves in the trust we’ve built with people around the world to navigate the latest technology safely and with confidence. And that’s exactly why we recently launched the Gen Agent Trust Hub – our trust layer for the agentic AI ecosystem.AI agents are no longer theoretical. They are here. They are editing files, installing packages, calling APIs, connecting to MCP servers, spawning sub-agents, persisting memory, and executing real workflows across environments. This shift from passive AI to autonomous execution fundamentally expands the attack surface.The Agent Trust Hub (ATH) exists to meet this moment. It is designed to provide continuous protection across the full lifecycle of an AI agent – from identity and verification to runtime enforcement. But security at this scale cannot rely on proprietary guardrails alone. It requires shared foundations the industry can build on.To help establish that foundation, we created the AI Agent Safety Standards by Gen to serve as a unified framework designed to bring consistency, portability, and accountability to agentic systems. This framework is currently built on two complementary pillars:<ul type="disc"><li data-list-item-id="e464ce0354d35c1a986c83945bc06b0cd">AI Agent Runtime Safety Standard (AARTS) – an open standard for runtime decision enforcement across agent hosts</li><li data-list-item-id="e4a7d4ceb7039019b7c2554401a8bb1c3">Skill IDs – a deterministic, content-addressable fingerprinting system for AI agent skills</li></ul>Together, they enable the ATH and the broader agentic AI community to enforce trust not just within one environment but across the broader agentic ecosystem. &nbsp;Let’s dig into the details.&nbsp;<h2>Pillar One: Standardizing Runtime Safety for AI Agents</h2><h3>AARTS</h3>AI agents operate across a fragmented ecosystem of IDEs, orchestrators, frameworks, and standalone applications. Each host defines its own lifecycle events, security hooks, and enforcement logic.This fragmentation creates blind spots. A security engine integrated into one host may lack context or control in another, even when the risks are identical.AARTS&nbsp;addresses this gap. It is not a product. It is a vendor-neutral contract that defines:<ul type="disc"><li data-list-item-id="e226fc797549b56b0ae0a537923fd79f6">Where security decisions can be made (hook points)</li><li data-list-item-id="e7566ceb595a0278da9453bbd84659578">What data is available for evaluation (data model)</li><li data-list-item-id="e637f36bcc4e8dcfac7321ad59230c1c1">How decisions are enforced (verdict semantics)</li></ul>Simply put:&nbsp; AARTS standardizes runtime security decision-making across agent hosts.<h3>The Architecture</h3>AARTS defines three cleanly separated roles:<ol><li data-list-item-id="e7a445b9a896b9b89299afa17ca58c69e">Host Runs the agent, emits lifecycle events, and enforces decisions.</li><li data-list-item-id="e989b722cd161ff069c924d70571cd6b7">Adapter Maps host-native events into a standardized AARTS schema.</li><li data-list-item-id="ed862f4398b4b82c3b52c721801728a9c">Security Engine Evaluates events and returns structured verdicts.</li></ol>This separation prevents superficial “checkbox security” while preserving portability. Hosts provide the right context at the right time. Engines make decisions without depending on host internals.In ATH, this architecture allows enforcement logic to remain portable while enabling hosts to integrate in a predictable way.<h3>Hook Points: Where Safety Happens</h3>AARTS v0.1 defines 19 hook points across the agent lifecycle, including:<ul type="disc"><li data-list-item-id="ec5255705352d810833f77d79b310a42d">PreToolUse — evaluate shell commands, file writes, web requests, package installs</li><li data-list-item-id="ee1ebbdf3e4522a59dedaa55c0305d903">PreLLMRequest — protect prompt integrity and instruction layering</li><li data-list-item-id="e10ef155bfe4c584afd7492da267796be">PreSkillLoad / PrePluginLoad — enforce supply chain controls</li><li data-list-item-id="ee6184f1048dfbf4ee3c0e62c2d3dff16">PreMCPConnect — treat MCP connections as trust boundaries</li><li data-list-item-id="ebc57267bf0e891e01f9daf277ced1a01">PreMemoryRead / PreMemoryWrite — protect persistent memory</li></ul>These hooks enable consistent policy enforcement regardless of whether an agent runs in an IDE, CLI, or orchestrator.Verdict Semantics: Allow, Deny, AskAARTS engines return structured verdicts:<ul type="disc"><li class="ck-list-marker-bold" data-list-item-id="e9615d2d55e251652e73363c052de0bd1">Allow</li><li class="ck-list-marker-bold" data-list-item-id="eb510a0ee27b0a853b90ff01cec91953d">Deny</li><li class="ck-list-marker-bold" data-list-item-id="ed6e8c58ce99af62dddbf6b530bc0c83c">Ask</li></ul>Each verdict includes severity, threat category, optional confidence scoring, and human-readable reasoning.Importantly, AARTS enforces deterministic behavior:<ul type="disc"><li data-list-item-id="edfce7cb3a277e1da6e442c971f8cc8e1">If a host cannot support interactive “Ask,” it defaults safely to Deny</li><li data-list-item-id="ec790330b39c695d6cdacf4118e106c1b">If an engine fails, hosts fail-open and log explicitly</li></ul>These operational tradeoffs are intentional. Predictability is essential in security infrastructure.<h3>Why AARTS Matters</h3>Without a shared runtime contract:<ul type="disc"><li data-list-item-id="e2574817ec2bfc1a1b0233c5fca970994">Security integrations are bespoke and brittle</li><li data-list-item-id="ebbe5c354debe741cc08436719a34032e">Tool taxonomy is inconsistent</li><li data-list-item-id="e2f498a30e5d748e37c3176b169145707">Prompt injection controls vary by host</li><li data-list-item-id="e3aff5387909fd85f523c40998fdb13b0">Supply chain risk is unevenly enforced</li></ul>With AARTS:<ul type="disc"><li data-list-item-id="eaa8f402b20b740f0992dd0f9b4f42b44">One engine can operate across multiple hosts</li><li data-list-item-id="e3ddcda4fa65f1abd066be4b0bef0201b">Policies remain portable</li><li data-list-item-id="e5ec3076209374ae5eafb39a00f19adf4">Audit logs become comparable</li><li data-list-item-id="e6f17fa0cc0a6a6e0136b63569cdc58a6">Trust boundaries are explicit</li></ul>AARTS standardizes enforcement in the agentic world.To read the full technical breakdown, see the full AART&nbsp;<a href="https://www.gendigital.com/blog/news/company-news/ai-agent-runtime-security">technical blog post</a>. To comment on the standards, visit our page on&nbsp;<a href="https://github.com/gendigitalinc/aarts">GitHub</a>.<h2>Pillar Two: Skill IDs</h2><h3>Fingerprinting AI Agent Skills</h3>AI agents are extended through skills – directory bundles containing a SKILL.md prompt file alongside scripts, templates, configuration, and documentation.These skills function like plugins. Install one, and the agent gains new capabilities.But skills are not single files. They are directory trees.And directory trees are notoriously difficult to fingerprint reliably.<h3>The Identity Problem</h3>A naive SHA-256 hash of a ZIP file does not work:<ul type="disc"><li data-list-item-id="e6fc83ba16d130bd7d3d62ba2af79f96d">ZIP files are non-deterministic</li><li data-list-item-id="ee7939e0ca570cb480cbdc5b8e5460ece">Timestamps vary</li><li data-list-item-id="e5d398fbba0c41d53d0e3782902bce4c1">Entry order differs</li><li data-list-item-id="e95611c8e95e6ad4f16eccdede99ac42c">Unicode normalization differs across OS platforms</li><li data-list-item-id="ef8771bdef58d5438cc192edc36e89c56">Wrapper directory names vary</li></ul>Two identical skills can produce different ZIP hashes.That is unacceptable for security workflows.<h3>Designing the Skill ID</h3>Skill IDs solve this problem by creating a deterministic, content-addressable identifier for a skill’s logical directory tree.The algorithm:<ol><li data-list-item-id="ebdc8f7c1fc531f4ccbd79f2baf7b6d83">Extract all files and directories</li><li data-list-item-id="e06cf4d178c29a57575a249d22d5cb9b4">Normalize paths (slashes, Unicode NFC, dot components)</li><li data-list-item-id="e69f139d48a1c91815267ffb649c74e07">Strip wrapper directories</li><li data-list-item-id="e07c1da87b4b07a634d73a79ab93f9134">Hash each file individually (SHA-256)</li><li data-list-item-id="ef7cb735107df0cafdbcc921e639c0212">Build sorted tree entries using null-byte delimiters</li><li data-list-item-id="eab8b3782aab3b4dd9b0f4aed3255caf8">Hash the tree to produce the final Skill ID</li></ol>The result is a 64-character SHA-256 digest that changes if and only if meaningful content changes.Same content, different ZIP packaging? Same ID. One byte changed? Different ID.This mirrors git’s tree hashing model and decades of security best practices.<h3>What Skill IDs Enable</h3>A stable identity primitive unlocks established security workflows:Allowlisting Approved skills can bypass repeated analysis.Content-addressable storage Deduplicate identical submissions automatically.Per-file caching Reuse expensive AI analysis on unchanged files.Detection flagging Connect file hashes to reputation systems.Version tracking Content becomes the version boundary.Skill IDs provide identity before verdict.<h3>From Identity to Authenticity: Signing Skills</h3>Identity answers “what is this?”Authenticity answers “who published this?”We are exploring a signing model inspired by Authenticode:<ul type="disc"><li data-list-item-id="e2103c63753a0f24a87fa144d75611c7a">A skill.sig file embedded inside the directory</li><li data-list-item-id="e28e6643465e0cabeea54eb4bc5302028">Excluded from the Skill ID calculation</li><li data-list-item-id="e700fd96bf7f3d0db4aa70df0a92d57ec">Contains a signature over the Skill ID</li><li data-list-item-id="ea2483e766cae2defa9d2dd19707d9302">Verifiable against the author’s public key</li></ul>This enables:<ul type="disc"><li data-list-item-id="eddf73c0b79d7d482c030736b4f449be8">Author signing</li><li data-list-item-id="e3d708097518f6e38a31a73aaf27ecb49">Marketplace attestation</li><li data-list-item-id="e81ca5157252eece76405ff632c0d6722">Certificate chains</li><li data-list-item-id="efe336aa9f477f99f141fc5a81f887d9b">Revocation workflows</li></ul>Self-verifiable skills create accountability without external lookups.To read the full technical breakdown, see the full <a href="https://www.gendigital.com/blog/insights/research/ai-agent-skill-fingerprinting" target="_blank" rel="noreferrer noopener">SkillsID technical blog post</a>. To comment on the standards, visit our page on <a href="https://github.com/gendigitalinc/skill-id-standard">GitHub</a>.&nbsp;<h2>The AI Agent Safety Standards by Gen: Identity + Enforcement</h2>AARTS governs runtime enforcement. Skill IDs govern artifact identity.Together, they form the foundation of the AI Agent Safety Standards.<ul type="disc"><li data-list-item-id="ea3ef208939f34e4fcfaf98bd8e26b2d6">Skills can be uniquely identified, versioned, and signed.</li><li data-list-item-id="e30dceebd279e7a291dc71a82c7168ab2">Runtime actions can be evaluated consistently across hosts.</li><li data-list-item-id="e1a7b0d4259c4abb5e6ba2f38dffd6aaa">Supply chain trust and runtime enforcement operate under shared semantics.</li></ul>This is the same model that matured endpoint security over decades:<ul type="disc"><li data-list-item-id="ebacb70fb4a6565c103650a6c6ee67532">File hashes</li><li data-list-item-id="ed254dd1eec0c62e2aea6bce82e871995">Content signatures</li><li data-list-item-id="e37a3133a17b4a1adca017b868990baa6">Runtime enforcement</li><li data-list-item-id="eeeb5f5d7a84badb31f60600269d24edf">Portable policy engines</li></ul>We are applying those proven patterns to a new artifact type and a new execution model.<h2>Looking Ahead</h2>These standards are early. AARTS v0.1 is a draft. Skill ID signing is an evolving proposal. Adapter conformance testing, enterprise fail-open profiles, and cross-marketplace reputation sharing remain active areas of collaboration.But the direction is clear.AI agents are moving from experimentation to infrastructure. Security must do the same.The Gen Agent Trust Hub is our contribution to building a predictable, interoperable trust layer for the agentic ecosystem.&nbsp;We invite host builders, marketplace operators, enterprise security teams, and fellow security vendors to review, adopt, and challenge.Because in the agentic era, safety cannot be bespoke. It must be foundational.&nbsp;

Shaping the standards for a safer, freer Agentic Era 

Leading the Way for AI Agent Safety 

Director of Threat Research & Applied AI

We built a security engine that protects AI agents across several major platforms. The hardest part wasn't building the protection. It was discovering that each platform exposes different security-relevant events, provides different context about what the agent is doing and why, and enforces security decisions differently. The same agent action we can catch and block in one platform is invisible in another, not because our detection failed, but because the platform never told us it happened. There are now over a dozen agent platforms, from IDE assistants like Claude Code, Cursor, and GitHub Copilot, to agentic frameworks like LangChain, CrewAI, and OpenAI Agents SDK, to orchestrators like n8n, and each one handles this differently, if at all.Today, Gen is releasing AI Agent Runtime Safety Standard (AARTS) as part of its Agent Trust Hub initiative, which aimsto address this fragmentation. This is not a security product, but rather a set of vendor-neutral standards that connects agent hosts (IDEs, orchestrators, frameworks, standalone agent apps), security engines (components that evaluate agent actions), and adapters (thin mappings that translate host-native events into a common schema). For those building or operating agents, AARTS enables portable, consistent security decisions across hosts, eliminating the need to rebuild security integrations from scratch.&nbsp;The standard is open and vendor-neutral, and any host or security vendor can implement or contribute to it.<h2 class="text-align-justify">The Problem AARTS Addresses</h2>Agentic systems fail in ways that are familiar but occur more rapidly and with greater reach. Examples include sequences evolving from helpful actions to dangerous activities like&nbsp;"download and execute," prompt injection steering tool use, supply chain issues affecting skills and plugins, sensitive data exposure by agents, and permission confusion resulting from sub-agents and external tool providers creating additional trust boundaries. Although these risks are not new, they now manifest within a rapidly diversifying set of hosts and tool APIs.Without a shared contract, security becomes a collection of one-off integrations, each missing context and offering inconsistent enforcement. This leads either to weak coverage, due to incomplete integrations and context, or to overly blunt blocking when trust is undermined by limited interpretation. AARTS targets the root cause: the lack of shared semantics and hook points.In our previous&nbsp;<a href="https://www.gendigital.com/blog/news/company-news/ai-agent-detection-and-response" target="_blank">post on Agent Detection and Response</a>, we described how attackers register AI-hallucinated package names on npm and PyPI, preloaded with infostealers. Catching that requires seeing the package install action with enough context — the package name, the source, whether the agent hallucinated it or the user requested it. One platform gives us all of that. Another gives us the command string with no structured metadata. A third doesn't emit the event at all. Same attack, three different levels of visibility.Simply put, AARTS standardizes where security decisions can be made (hook points), what data is available for decision-making (data model), and how decisions are enforced (verdict semantics), ensuring consistent protections across different agent hosts.<h2 class="text-align-justify">Architecture and Roles</h2>AARTS defines three distinct roles:<ul type="disc"><li data-list-item-id="ef43f78807d68ed5d7cafc41e43ed6a77">Host: The environment that runs the agent. The host emits lifecycle events at defined hook points and enforces decisions.</li><li data-list-item-id="ea8ecfedda9151e1e4ff45954fc0bd003">Adapter: A minimal translation layer that maps host-specific events into AARTS events, normalizing tool names, lifecycle phases, and context.</li><li data-list-item-id="ec84e412023baa1359b60a4c189c0ce73">Security Engine: The evaluator that receives AARTS events, applies detection strategies, and returns structured verdicts.</li></ul>This separation matters. Embedding security logic in hosts results in superficial security ("checkbox security"), while engines depending on host internals compromise portability. AARTS keeps the boundary clean: hosts provide the right moments and context, and engines make decisions. AARTS also supports various integration models (in-process, subprocess, remote), accommodating different latency, isolation, and operational requirements.<h2 class="text-align-justify">How the Standard Works</h2>AARTS defines hook points, moments in an agent's lifecycle where a security engine can intercept, evaluate, and act. Version 0.1 specifies 19 of them across session management, prompt lifecycle, tool execution, plugin and skill loading, sub-agent behavior, memory operations, and output delivery.Not all hooks carry equal weight. Three illustrate the design logic:<ul type="disc"><li data-list-item-id="e9e499b9374a4cd1f71378518f359c0d6">PreToolUse is the primary checkpoint. Before an agent runs a shell command, writes a file, makes a network request, or installs a package, the security engine sees the action, its arguments, and the context that led to it, then returns a verdict: allow, deny, or ask the user. This is where most real-world threats get caught.</li><li data-list-item-id="ebd37c3ab71aca6ef9cddd1080d793f75">PreLLMRequest operates earlier in the loop, before the prompt reaches the model. It lets engines inspect prompt integrity: whether safety instructions survived context compaction, whether untrusted content was injected into the conversation, whether the instruction layering is intact. If PreToolUse is the checkpoint at the door, PreLLMRequest watches for problems before the agent even decides what to do.</li><li data-list-item-id="ecce291342cb701e4290928d827faf930">PreSkillLoad addresses supply chain risk. When an agent installs a plugin or skill from a marketplace, the engine can evaluate the trust source (where it came from, whether it's signed, whether it was modified) before it gets loaded. AARTS can also direct the host to strip hooks from skills, preventing plugins from disabling the security layer that's supposed to govern them.</li></ul>The remaining 16 hooks follow the same pattern: they sit at the moment where risk becomes real and provide the engine with enough context to make a decision.For those decisions to be portable across hosts, the inputs have to be consistent. AARTS standardizes the event structure: every event carries a mandatory envelope (hook point, session ID, timestamp, host identity) plus standard extensions, reusable field groups for conversation context, tool details, trust source metadata, modification tracking, and provenance. A canonical tool taxonomy maps host-specific tool names (Cursor's "terminal" vs. Claude Code's "bash") to common categories (shell, file_write, web_request, package_install), so detection logic written once works everywhere.Verdicts are structured: a decision (allow, deny, or ask), a threat category, a severity level, confidence, and a human-readable explanation for the user. Two design choices are worth noting. If the host can't prompt the user, ask falls back to deny, safe but a real constraint for headless orchestrators. If the engine crashes or times out, the host treats it as allow and logs the failure. Fail-open is the right default for developer tools where latency matters, but enterprise deployments will want to revisit this per environment.<h2 class="text-align-justify">Conformance Levels: Gradual Adoption</h2>AARTS defines three conformance levels:<ul type="disc"><li data-list-item-id="e18c7418214ef4f97b683f20402deb227">Level 1 (Basic): Requires SessionStart and PreToolUse hooks, minimum tool coverage (shell, file_write, web_request), enforcement of allow and deny (ask may be treated as deny).</li><li data-list-item-id="e0369d9837c299bdfd5a5c490fb899318">Level 2 (Standard): Adds plugin and skill load hooks, prompt lifecycle protection, broader tool coverage, additional hooks (PrePluginLoad, PreSkillLoad, PostInputProcessing, PreLLMRequest, PostToolUse), and requires provenance on PreToolUse.</li><li data-list-item-id="e31f70f735daa583aec2ef8c2d180686d">Level 3 (Comprehensive): Provides full lifecycle coverage including user input, prompt response cycle, tool modification, sub-agents, MCP connect, memory read/write, output delivery, and session end. Clarifies sub-agent inheritance and memory protection.</li></ul>This tiered approach offers a realistic adoption path: Level 1 addresses basic failures, Level 2 tackles prompt integrity and supply chain issues, and Level 3 supports persistent and autonomous agents.<h2 class="text-align-justify">Open&nbsp;Considerations</h2>As we move AARTS beyond a draft specification,&nbsp;the following are being considered:<ul type="disc"><li data-list-item-id="ef56e3529222a5671c75f8e80fbc5c2c9">Enterprise fail-open story: The spec mandates fail-open behavior. Deployment profiles may be needed to reflect the realities of different environments.</li><li data-list-item-id="e5e2beee0ceee16ba315173c83dcc4596">Adapter integrity: Ensuring adapters correctly map tool types and extract artifacts is vital. A conformance test suite for adapters is as important as the specification itself is a next-step priority.</li><li data-list-item-id="eea2912c8ee60ab64a8339e4d3c2b5748">Consent for privacy: Explicit consent is required for external transmission of prompts and tool data. Operational guidance or recommended patterns are needed to avoid incompatible implementations.</li><li data-list-item-id="e7dbd49139e599330dbad43c59209bc82">Ask semantics in headless environments: Treating ask as deny by default is safe but may discourage engines from using ask. A standard way for deployment policy to handle ask in these scenarios is needed.</li></ul>AARTS aims to translate&nbsp;these considerations into predictable operational behavior.<h2 class="text-align-justify">Call for Feedback</h2>AARTS v0.1 is a draft intended for early review by host builders, security vendors, and enterprise operators.&nbsp;The full specification is available <a href="https://github.com/gendigitalinc/aarts" target="_blank">here</a>. If you build agent hosts, consider whether you want every security integration to remain one-off. If you develop security engines, ask yourself whether you want to rewrite the same logic for each host and still miss critical context. AARTS aims to make the answer “no”.&nbsp;We welcome contributions — open an issue or submit a pull request.

AARTS standardizes how AI agent platforms expose security events, enabling portable runtime protection across the growing agent ecosystem

Introducing AARTS: An Open Standard for AI Agent Runtime Safety

You gave an AI agent access to your computer. Maybe it's writing code for you, managing your emails, or handling your finances. It's working with your credentials, acting on your behalf, and making decisions you used to make yourself. Fast, confidently, and largely unsupervised. That's the deal: you trade safety and oversight for productivity. That changes the security model.But who's watching what it actually does?That is why we built the Gen Agent Trust Hub (ATH), our trust layer for the agentic AI ecosystem, designed to secure agents across their lifecycle from skill to runtime to enforcement.Agent Detection and Response (ADR) is the runtime pillar — the layer that governs what agents actually do.<h2 class="text-align-justify">What is ADR?</h2>ADR intercepts agent actions at the moment of execution, before they land, and evaluates whether they're safe. It allows, asks the user, or denies. That's the core.Verification tells you what an agent is. ADR tells you what it's doing. These are complementary. Verification is necessary, but it can't govern what happens at runtime. A verified skill can still hallucinate a malicious package name. A signed plugin can still be exploited through prompt injection. A trusted agent can still lose its safety instructions mid-session and go off the rails. The moment of action is where risk becomes real.The principle isn't new. Every major computing paradigm has developed its own detection and response layer. Endpoints got EDR. Distributed infrastructure got XDR. Not replacements for what came before, but purpose-built layers for new execution surfaces with new threat models. AI agents are the next such surface, and ADR is the layer built for it.Within the Agent Trust Hub, ADR is the enforcement engine that turns trust signals into real-world protection.<h2>Why Now?</h2>The threats targeting AI agents are already here. What follows is a small sample of the agentic threats we’re seeing. The actual attack surface spans everything an agent can do, and agents can do a lot.Your agent installs malware for you. AI agents hallucinate. When they hallucinate a package name during installation, that's not just an error, it's an opportunity. Attackers monitor AI-suggested package names and register them on npm and PyPI, pre-loaded with infostealers and backdoors. The technique is called slopsquatting, and it's already being exploited at scale. In February 2026, researchers uncovered a campaign of&nbsp;<a href="https://www.securityweek.com/new-sandworm_mode-supply-chain-attack-hits-npm/">19 typosquatted packages specifically</a> targeting users of AI coding tools, designed to exfiltrate SSH keys, AWS credentials, and API tokens.Your agent ignores your instructions. Summer Yue, Meta's Director of Alignment, told her OpenClaw agent to&nbsp;<a href="https://techcrunch.com/2026/02/23/a-meta-ai-security-researcher-said-an-openclaw-agent-ran-amok-on-her-inbox/">confirm before taking any action</a> on her email. It worked, until the session ran long enough to trigger context compaction, a mechanism where the agent compresses its memory to keep running. The safety instructions were among the first things dropped. The agent deleted 847 emails. She had to physically run to her machine to stop it.Your agent is a new delivery channel for malware. Attackers are already using multiple paths to get malicious code running through agents. Weaponized skills on public marketplaces have delivered the&nbsp;<a href="https://x.com/GenThreatLabs/status/2018323584834318419">AMOS infostealer to macOS users</a>. Malicious project configurations have achieved&nbsp;<a href="https://research.checkpoint.com/2026/rce-and-api-token-exfiltration-through-claude-code-project-files-cve-2025-59536/">remote code execution in Claude Code</a> the moment a developer opens a repository. Prompt injection through fetched content can turn a trusted agent into an attacker's proxy. The delivery mechanisms vary. The result is the same: your agent executes something it shouldn't, and it does so with your permissions.These are just three examples. The pattern is consistent: agents operate with real authority, and that authority is being exploited. Through supply chains, through the agent's own fragility, and through the same malware ecosystem that has targeted every other computing platform before them.<h2>Where ADR Must Operate</h2>To be effective, ADR must sit as close to the agent's execution loop as possible. Not as an external service watching from the outside. Inside, where the actions happen.Agent sessions contain source code, credentials, business logic, and personal data. ADR evaluates locally, on the device. No prompts, tool inputs, or code leave your machine for analysis.Agents are not robust systems. Their own internal mechanisms can silently drop safety instructions or get poisoned across sessions. A security layer that only sees inputs and outputs misses the moment things go wrong inside. ADR watches the execution loop itself: every action the agent attempts, in context, in sequence.Only a client-side layer sees the complete picture: the prompt history, what files were already modified, the sequence of prior actions. A remote service sees isolated events. ADR sees the session. That difference is what makes it possible to distinguish a legitimate file deletion from a compromised agent cleaning up its tracks.<h2>Sage: ADR in Practice</h2>In February, we&nbsp;<a href="https://www.gendigital.com/blog/news/company-news/sage-ai-agent-security">open-sourced Sage</a> as the first implementation of ADR. It runs client-side, directly inside the agent's execution loop, across Claude Code, Cursor, and OpenClaw. Over 200 detection rules cover supply chain attacks, credential exposure, dangerous commands, persistence mechanisms, and more, backed by Gen's threat intelligence.Since launch,&nbsp;<a href="https://github.com/avast/sage/">Sage</a> has quickly crossed 1,000 installs and is available across the major agentic tool marketplaces. The open-source community is already contributing, porting Sage to new platforms like OpenCode and hardening detection rules. As one independent security researcher concluded after&nbsp;<a href="https://www.linkedin.com/pulse/paranoid-sage-testing-security-tool-agents-radek-hendrych-capff/">testing Sage</a>: "Real-time monitoring and management of AI agents based on deterministic measures is, in my view, the right way to go."All these responses confirm what we suspected: people want this layer.<h2>What's Next</h2>ADR is the runtime layer. But runtime protection alone isn't enough.&nbsp;The Agent Trust Hub is built on the idea that trust in the agentic era must be layered: verification before installation, ecosystem trust signals across marketplaces, and enforcement at execution. ADR closes the gap at the moment risk becomes real.&nbsp;The industry needs a common interface for how agents expose their actions to security tools. A shared standard, so that protection works consistently regardless of which agent you use or which platform you're on. We've been working on that too. More soon.

Inside the Gen Agent Trust Hub, ADR turns trust signals into real-world protection.

Gen Agent Trust Hub Introduces Agent Detection and Response: The Missing Security Layer for Agentic AI 

Threat Research Team

AI agents are starting to do the parts of computing that used to be “hands on keyboard”. They run terminal commands, edit files, install packages, and fetch things from the web, because that’s what it takes to get real work done. Tools like Claude Code, Cursor, and OpenClaw give these agents direct access to your machine and your sensitive information. That's what makes them useful. It's also what makes them risky. These agents make mistakes. They install packages that don't exist because they hallucinated the name. They pick up credentials and pass them where they shouldn't. They'll download and run programs from the internet without a second thought if the task seems to call for it. All of this happens fast, with confidence, and without asking. If you’ve watched an agent confidently suggest curl … | bash or “just add your API key here” into a file it shouldn’t touch, you’ve seen the problem.&nbsp;Agents are also targets. Malicious URLs, poisoned dependencies, and compromised plugins can turn an agent into an attack vector, one that already has access to your files, your terminal, and your network. This is already happening. <a href="https://x.com/GenThreatLabs/status/2018323584834318419" target="_blank" rel="noreferrer noopener">We recently identified</a> around 400 malicious skills on ClawHub, a public registry for agent extensions. At the time of discovery, they accounted for 12% of all available skills. These weren’t obviously shady throwaways; many were weaponized versions of legitimate skills, designed to trick agents into downloading malware.&nbsp;&nbsp;These are the same agents we're starting to trust with payments, infrastructure, and sensitive workflows. The gap between what agents can do and what keeps them in check is real, and it's growing.&nbsp;Today, Gen, the company behind Norton, Avast, LifeLock, and AVG, is releasing Sage to close that gap. With Sage, the Agent Trust Hub now evaluates and governs agent behavior during execution. Not just before installation. Not just at verification. But in the exact moment an action is about to happen.&nbsp;

<h2>What Sage does</h2>Think of Sage as a lightweight safety shield for AI agents. It sits inside the agent's workflow and checks every action before it happens: shell commands, URL fetches, file writes, package installs. For each action, Sage returns a verdict:&nbsp;<ul type="disc"><li data-list-item-id="e2aee30f293d4edf72390d310cdfa3f0e">Allow — no threat detected, the action proceeds&nbsp;</li><li data-list-item-id="e89d49ae9fae752dee97f089112c466b8">Ask — something looks suspicious, the user decides&nbsp;</li><li data-list-item-id="e44ca3f76876a9e666f2544e1233366ba">Deny — confirmed threat, the action is blocked&nbsp;</li></ul>The agent never notices unless something is wrong.&nbsp;Sage catches both sides of the risk. It protects agents from external threats like malicious URLs, compromised packages, and dangerous downloads. And it protects users from agents themselves, when they try to run destructive commands, expose credentials, or write to sensitive system files.&nbsp;Here's a concrete example. An agent automating a setup task decides to download and execute a script from the internet. No review, no confirmation. Sage recognizes the pattern and blocks it before anything runs.&nbsp;<h2 class="text-align-justify">Part of a larger commitment</h2>Sage is not a standalone effort. It’s part of a broader strategy to embed continuous trust into the AI skills ecosystem through the Gen Agent Trust Hub.&nbsp;&nbsp;The Skill Scanner of the <a href="https://ai.gendigital.com/agent-trust-hub" target="_blank" rel="noreferrer noopener">Gen Agent Trust Hub</a> helps determine whether an agent extension is trustworthy before it gets installed, using cloud-based verification and classification. Sage picks up where that leaves off. Once the agent is running, it enforces safety locally, on your machine, checking every action at the moment it's about to execute.&nbsp;&nbsp;Together, they cover the full lifecycle: from the decision to install something to the moment it actually runs. More capabilities are on the way as the agentic ecosystem grows.&nbsp;<h2 class="text-align-justify">Open source, on purpose</h2>The agentic platforms themselves are designed for open integration: open-source tools, community plugins, public hook APIs. A closed security layer would be harder to adopt in a space that moves fast and depends on community integrations.&nbsp;At the same time, there is no established playbook for how to secure AI agents. By open-sourcing Sage, we're proposing one and inviting the community to help define what safe agents should look like in practice.&nbsp;This first version is lightweight. It's not a full antivirus product as we know it, but it addresses the problems where they are. It covers the high-risk paths we think matter most: commands, file changes, URL fetches, and package installs, including catching hallucinated or malicious dependencies before they land on your machine. Sage ships with over 200 detection rules covering command injection, persistence, credential exposure, obfuscation, and supply-chain attacks.&nbsp;Sage currently supports Claude Code, Cursor, and OpenClaw, with more platforms on the way. If you find a detection that's too noisy or not strict enough, open an issue. If you want to add a rule, improve a check, or add support for another agent platform, send a pull request.&nbsp;We built Sage to be extended.&nbsp;&nbsp;<h2>Try it</h2>Learn more about Sage at <a href="https://ai.gendigital.com/sage" target="_blank" rel="noreferrer noopener">https://ai.gendigital.com/sage</a>. For technical details, documentation, and source code, visit the project on <a href="https://github.com/avast/sage" target="_blank" rel="noreferrer noopener">https://github.com/avast/sage.</a>&nbsp;If you use Claude Code, Cursor, or OpenClaw, install Sage and put it in the path of real work. The fastest way to improve a safety layer is to expose it to real commands, real repos, and real mistakes. That's what we're doing here — shipping early, in the open.&nbsp;

Closing the growing security gap between what Al agents can do and what keeps them in check

Introducing Sage: Safety for Agents 

AI agents aren’t just helpful in chats anymore. They’re actually taking action on your behalf. Autonomous AI can access data. They move from suggestion to execution without hesitation.&nbsp;This is what we call “mindless artificial intelligence.”&nbsp;When technology starts taking action on our behalf, trust has to be built into the system itself.&nbsp;That’s why Gen is partnering with Vercel to bring independent safety verification to the AI skills ecosystem at <a href="https://skills.sh/" target="_blank">skills.sh</a>, embedding trust directly into the skills layer.&nbsp;

<h2>Independent verification. Built in.&nbsp;</h2>Through this partnership, the Gen <a href="https://ai.gendigital.com/agent-trust-hub" target="_blank">Agent Trust Hub</a> will evaluate skills on skills.sh and assign clear, transparent classifications:&nbsp;🟢 Safe&nbsp; 🟡 Low Risk&nbsp; 🟠 High Risk&nbsp; 🔴 Critical Risk&nbsp;Behind those ratings is advanced risk modeling and threat intelligence from Gen Threat Labs, analyzing permissions, behaviors, vulnerabilities and potential malicious intent.&nbsp;The goal isn’t to slow innovation. It’s to help it scale responsibly. Developers should be able to build boldly. Users should be able to install confidently. And both deserve clarity.&nbsp;<h2>Security as infrastructure, not an afterthought&nbsp;</h2>By integrating verification directly into skills.sh, Gen and Vercel are making security part of the AI development lifecycle, not something bolted on after the fact.&nbsp;In the agentic world, skills are how things get done. Until now, developers and users had limited visibility into whether a skill was truly safe. Reputation and documentation can’t tell the whole story. As agents gain autonomy, guesswork isn’t good enough.&nbsp;The trust has to be visible.

<h2>Powering Digital Freedom in what comes next&nbsp;</h2>At Gen, we believe Digital Freedom means being able to embrace new technology without sacrificing safety or confidence. As AI evolves, our responsibility evolves with it.&nbsp;The future of AI will be powerful. And expansive. But, it must also be secure by design.&nbsp;This partnership is one more step toward building the trust foundation the agentic era demands, so innovation and confidence can grow together.&nbsp;

Bringing transparent risk ratings to the AI skills ecosystem to help developers build boldly and users move confidently

The trust layer for the agentic era 

Global Head of Scam Research

Today, we’re proud to announce that we’ve joined the&nbsp;<a href="http://globalantiscam.org/">Global</a><a href="https://www.gasa.org/"> Anti-Scam Alliance </a>(GASA) as a Foundation Member — a critical next step in our Purpose of Powering Digital Freedom.<h2>Why GASA — and why Gen?</h2>The Global Anti-Scam Alliance (GASA) exists to build a coordinated, international front against digital scams. It brings together governments, consumer protection organizations, financial institutions, tech platforms and cybersecurity leaders to do what no single player can do alone: share intelligence, shape policy, and deliver rapid, systemic action.Gen brings to the table:<ul type="disc"><li>Global reach across 150+ countries and nearly 500 million users</li><li>A multi-brand portfolio including Norton, LifeLock, Avast, AVG, Avira, CCleaner, and ReputationDefender</li><li>Cutting-edge innovation, like&nbsp;<a href="https://genie.norton.com/">Norton Genie</a>, our AI-powered scam detection tool that helps people spot malicious content in real-time<ul><li>A longstanding commitment to education, privacy, and consumer empowerment — backed by ongoing scam research and insights from our team.&nbsp;<a href="https://www.gendigital.com/blog/insights">Read our insights blog</a>.&nbsp;</li></ul></li></ul>By joining GASA, we’re extending that impact — working with fellow members to build smarter, faster, more connected defenses that match the sophistication of today’s scam operations.<h2>This is about more than technology. It’s about trust.</h2>Online scams are no longer isolated incidents. They are systemic, sophisticated, and increasingly powered by emerging technologies like AI. They mimic real conversations, exploit trusted brands, and adapt faster than many institutions can respond.&nbsp;We’ve tracked this shift in our own&nbsp;<a href="https://www.gendigital.com/blog/insights/reports/threat-report-q4-2024">research and reporting</a>.&nbsp;There’s a stigma around being scammed. And it keeps people quiet. We’re here to change that — by shifting the conversation and strengthening the support systems that help people take back control.Because falling for a scam isn’t a sign of weakness. It’s a sign of just how advanced and manipulative scam tactics have become. And if we want to reverse the trend, we need to meet it with collaboration, transparency and relentless innovation.<h2>What’s next?</h2>Joining GASA is not just a partnership. It’s a signal of intent.We intend to work across borders, sectors and systems to drive meaningful change. We intend to build tools that don’t just react but anticipate. And, we intend to empower people with the clarity, context and confidence they need to protect themselves in a complex digital world.We’re honored to join this alliance&nbsp;as we deepen our commitment to protecting people. We’re advocating for smarter, more proactive digital safety policies worldwide. Visit our&nbsp;<a href="https://www.gendigital.com/us/en/public-policy/">Public Policy</a> page to learn more.&nbsp;

Gen is now a Foundation Member of the Global Anti-Scam Alliance (GASA)

Joining the global anti-scam alliance

Cyber Safety Chief Technology Officer

All over the world, people are embracing artificial intelligence (AI) in the ways they work, learn and communicate. A recent <a href="https://www.mckinsey.com/capabilities/quantumblack/our-insights/the-state-of-ai">report</a> from McKinsey &amp; Company found that companies across industries, regions and sizes are rapidly increasing their use of generative AI (gen AI) to perform regular functions, and that more people are using these tools outside of the office, as well.&nbsp;&nbsp;As a global leader in Cyber Safety, we recognize our role in considering the impacts of such a revolutionary and widely used technology, particularly one that has direct effects on digital life.&nbsp;&nbsp;To that end, we’re proud to publish a new series of policy papers that discuss what AI means for consumers, our company and the world around us. Together, these documents detail how we can work together to build an AI-enabled digital landscape that centers the issues of transparency, ethics and responsibility.&nbsp;&nbsp;<h2>Our Approach to AI at Gen&nbsp;</h2>The rise of AI has had significant implications for Cyber Safety. AI-powered threats often require AI-powered safeguards, and we’re increasingly incorporating these tools into our efforts to provide the best possible protection to consumers around the globe.&nbsp; &nbsp;To guide our AI research, use and deployment, we’ve identified the following five policy principles:&nbsp;&nbsp;<ul><li>Integrity – We use and create AI in only positive, legal and ethical ways. </li><li>Accountability – We assess the unique risks of AI and stand accountable for the outputs of the tools we build and use.&nbsp; </li><li>Data Protection – We protect company information, including intellectual property and personal data, and we respect the intellectual property rights of others.&nbsp; </li><li>Human Involvement – We control the outputs of AI by incorporating human oversight into our processes.&nbsp; </li><li>Transparency – People should be able to understand when they are significantly impacted by AI. We strive to be clear how the AI tools we build work, and how they affect stakeholders.&nbsp;&nbsp;</li></ul>We believe these principles allow us to invest in ethical and responsible AI to protect consumers and drive our growth. Read our <a href="https://www.gendigital.com/media/ibhn2tm2/cc-ai-policy-principles-flyer_link.pdf">Artificial Intelligence Policy Principles</a> for more information.<h2>Our Recommendations for Companies and Policymakers&nbsp;</h2>Building ethical AI platforms requires collaboration and alignment. The more organizations operate responsibly, promote transparency and protect against new threats, the more we can deliver an AI revolution that is founded on safety, freedom and trust. Our policy paper <a href="https://www.gendigital.com/media/dz3lghha/cc-gen-ai-thought-leadership-paper_links2.pdf">Artificial Intelligence Concerns &amp; Recommendations</a> lays out how we can do just that. A few examples include:&nbsp;<ul><li>Citizens should only use intelligent chatbots and generative models from providers who offer clear legal guarantees against the misuse of private data.&nbsp; </li><li>Companies should enhance transparency regarding AI technical solutions and open widely used AI-supposed ecosystems to public or third-party scrutiny.&nbsp; </li><li>Governments and regulators should support any measure that aims to raise public awareness regarding the issue of content authenticity on the Internet.&nbsp;&nbsp;</li></ul><h2>&nbsp;Our Research on the AI Threat Landscape&nbsp;</h2>&nbsp;We’ve also conducted a detailed analysis of the current landscape of AI-related threats and scams facing consumers and organizations alike. The report covers many of the major issues related to AI adoption, including misinformation, deepfakes, manipulation of personal data, discrimination, AI-generated cyber attacks, and so much more. View the full report, <a href="https://www.gendigital.com/media/skvp0l4u/cc-gen-ai-thought-leadership-paper-report-v4.pdf">The AI Revolution of Good and Bad </a>for a more in-depth perspective.&nbsp;We’re likely only at the beginning of AI’s impacts on our lives. As these new technologies evolve, we believe we can continue to meet new challenges, Power Digital Freedom and build a safer and more trusted AI-supported digital world.&nbsp;&nbsp;

Gen releases policy papers on Responsible Use of AI

AI at Gen: Unpacking what AI means for people, cybersecurity and our company

Corporate Communications Intern

Corporate Communication Specialist

As cyberattacks continue to evolve, so does Gen. However, the cybersecurity industry faces a pressing challenge: a growing technical skills gap. This gap is unbalancing the equation of demand for skilled cybersecurity professionals and the available supply of qualified individuals.   &nbsp;&nbsp;We’re committed to continuing to bridge that gap in this increasingly digitized world. &nbsp;&nbsp;Cyberskills versus cyberthreats&nbsp;With the sophistication of threats, both code-driven and human-engineered, the world demands a new generation of cybersecurity engineers equipped to understand emerging systems and defend against rapidly developing threats.  &nbsp;As cybercriminals devise increasingly complex and targeted attacks, the need for cybersecurity experts with specialized skills and expertise has never been more urgent. But, an Eurobarometer survey indicates that the <a href="https://europa.eu/eurobarometer/surveys/detail/3176">cyberskills shortage is only increasing</a>. While there needs to make staff highly cybersecurity-aware increases with it for companies across the EU.&nbsp;&nbsp;&nbsp;The diversity gap&nbsp;The shortage isn’t limited to skill sets. There is also a lack of diversity in the cybersecurity workforce. &nbsp;We believe great workers can come from anywhere. Yet, women and minorities are significantly underrepresented in the field. The nature of education and work has grown increasingly dispersed across geolocations, but education and training programs are often not reaching these populations effectively.  &nbsp;The consequences for organizations and individuals alike are far-reaching. This lack of diversity limits the pool of potential cybersecurity talent and hinders the industry's ability to address the skills gap comprehensively. &nbsp;&nbsp;How Gen is working to bridge the gaps&nbsp;Our company and our people recognize the gravity of the cybersecurity skills gap. We’re committed to addressing this issue head-on through various initiatives: &nbsp;<ol><li>Partnering with organizations like <a href="https://www.czechitas.cz/en">Czechitas</a> and <a href="https://nasscom.in/">Nasscom</a> to bridge the gender tech gap and promote diversity in the cybersecurity workforce. &nbsp;</li><li>Joining the <a href="https://commission.europa.eu/index_en">European Commission</a>’s Cybersecurity Skills Academy to discuss free training pledges and market needs.  &nbsp;</li><li>Pledging to close the gender gap in cybersecurity through an exclusive sponsorship with the <a href="https://women4cyber.eu/">Women4Cyber</a> Mentoring Program. This program is open to women of all experience levels and aims to advance skill development and career progression.  &nbsp;</li><li>Embracing <a href="https://www.gendigital.com/us/en/social-impact/diversity-equity-and-inclusion/">DEI initiatives</a> and fostering a company culture that attracts and retains top cybersecurity talent. We take pride in a diverse and inclusive workplace where everyone feels welcomed, valued and empowered to contribute to our collective cybersecurity efforts. &nbsp;</li><li>Offering a wide range of <a href="https://www.gendigital.com/us/en/life-gen/learn-gen/">educational programs and resources</a> to help our employees develop and enhance their cybersecurity skills &nbsp;</li><li>Supporting STEM education initiatives and implementing inclusive hiring practices.  &nbsp;</li></ol>The cybersecurity skills gap poses a significant challenge, but it is a challenge that we can continue to overcome through collaborative efforts. By working closely with organizations, pledging to close the gender gap, promoting inclusive hiring practices and fostering a supportive company culture we can create a future where everyone can succeed in the cybersecurity industry and collectively protect ourselves from the evolving threats of cyberattacks. &nbsp;&nbsp;If you’re interested in joining our global team to push back against emerging cybersecurity threats, find out more about <a href="https://gen.wd1.myworkdayjobs.com/careers">how you can join our team</a>. &nbsp;

Our call for action and inclusion to create a new workforce

How Gen is committed to bridging the global cybersecurity skills gap

Sr. Manager, CR and Environment

Today’s young people have a lot on their minds. Studies show they’re anxious about global issues like <a href="https://www.cbsnews.com/news/climate-change-anxiety/">climate change</a> and <a href="https://www.deloitte.com/global/en/issues/work/content/genz-millennialsurvey.html">economic instability</a>, and they’re <a href="https://www.nytimes.com/2024/01/29/upshot/teens-politics-mental-health.html">losing confidence</a> in their political leaders to reflect their needs and interests. Even many parents <a href="https://www.pewresearch.org/short-reads/2022/02/28/most-in-the-u-s-say-young-adults-today-face-more-challenges-than-their-parents-generation-in-some-key-areas/">agree</a> that young people face more challenges than they did, particularly in areas like saving for the future and buying a home.&nbsp;&nbsp;<a href="https://www.socialshifters.co/">Social Shifters</a> is looking to transform that anxiety into action. The organization is currently accepting submissions for its <a href="https://www.socialshifters.co/global-innovation-challenge/">Global Innovation Challenge 2024</a>, an annual competition that awards funding to young leaders (18-30 years) with an idea, project or business solution to a pressing social or environmental issue. We’re excited to announce that as part of our new partnership with Social Shifters, we are providing $30,000 USD in funding support (this grant is awarded from the Gen Foundation,&nbsp;a corporate-advised fund of Silicon Valley Community Foundation). Gen team members will also serve as volunteer judges for this year’s contest.&nbsp;

Seeking Solutions to Global IssuesAs Global Innovation Challenge judges, Gen team members will evaluate &nbsp;projects that use technology to address climate change and benefit the environment, such as recycling solutions, renewable energy, resource conservation and beyond. This approach is part of Social Shifters' larger endeavor to align with the United Nations&nbsp;<a href="https://sdgs.un.org/goals">Sustainable Development Goals</a>, a blueprint to achieve a better and more sustainable future for all.&nbsp;Submissions are open until July 31, and judging will take place throughout the month of September. The finalists will then pitch their finished project to a live panel in November, with grants of up to $10,000 USD to be awarded in December.&nbsp;&nbsp;The <a href="https://www.socialshifters.co/our-impact/">Global Innovation Challenge 2023</a>, which included projects addressing the refugee crisis, climate action, water stewardship and more, incubated 1,325 startup projects and businesses that have impacted upwards of 22 million people around the world.&nbsp;&nbsp;Elevating the Next Generation&nbsp;Gen is a family of trusted consumer brands built for the next generation of digital life. We’re committed to powering digital freedom, and we’re excited that our partnership with Social Shifters allows us to inspire and empower the leaders of tomorrow. For more on how we do this, check out our <a href="https://www.gendigital.com/us/en/social-impact/social-impact-report/">2024 Social Impact Report</a>.&nbsp;

Gen announces new partnership with Social Shifters

Supercharging Young People to Meet Global Challenges

Head of Digital Trust Services

Imagine you’re a recruiter tasked with hiring a new employee for a critical role. You find the perfect candidate on paper – impressive achievements, Ivy League education, and a long list of technical certifications. But something doesn’t quite add up. It’s a scenario that plays out far too often in the world of talent acquisition, where&nbsp;<a href="https://www.forbes.com/sites/bryanrobinson/2023/11/05/70-of-workers-lie-on-resumes-new-study-shows/?sh=5842c4924008">70% of individuals</a> have admitted to lying on a job application and the truth is seldom easy to discern.In recruiting, the ability to trust and verify a job candidate’s qualifications can take a lot of the guesswork out of making the right hiring decisions, helping ensure that placements possess the right skills, knowledge, and certifications to succeed on the job.Yet historically, background checks don’t come into the picture until the end of the talent search. They also rely on time-consuming, expensive, and error-prone manual processes. Meanwhile, the rising popularity of&nbsp;<a href="https://www.cnbc.com/2024/05/06/career-consultant-says-gen-z-are-misusing-ai-to-generate-cover-letters.html">AI-generated cover letters</a> and the now estimated&nbsp;<a href="https://www.forbes.com/sites/emmawhitford/2023/02/21/how-thousands-of-nurses-got-licensed-with-fake-degrees/?sh=65c65eae5c6d">$7B fake diploma industry</a> have flooded the applicant pool with unqualified candidates. In industries like healthcare, this can have potentially life-threatening results.At Gen, we believe in empowering everyone with the tools to navigate the digital world safely, privately, and confidently – which includes the ability to decipher fact from fiction. It’s why we’ve teamed up with&nbsp;<a href="https://www.accenture.com/us-en/services/blockchain/digital-identity">Accenture</a> to bring digital trust to HR and talent acquisition. Together, we’re proud to announce a new pilot program designed to enable HR teams to verify key candidate information in seconds – while minimizing the data they collect and empowering candidates with digital ‘credentials’ they can use elsewhere.The pilot features the&nbsp;<a href="https://midy.com/">Midy</a> wallet, by Gen, and Accenture’s Verifiable Credentials Portal, which has been integrated into Accenture’s Workday instance, the enterprise resource planning (ERP) platform they use to streamline the recruiting process. Upon invitation, participants undergo identity verification via Midy, obtaining a digital credential of their college degree from the National Student Clearinghouse along with a digital credential of their government-issued identity document. These verifiable credentials can then be shared with Accenture to populate their Workday profile with verifiable data attesting to their identity and education.

Employers benefit from streamlined vetting processes, while verified candidates enhance their prospects in competitive job markets.Additionally, the pilot has been designed around the requirements of the Fair Credit Reporting Act (FCRA), which sets the rules around sharing of information that may be used to help an individual demonstrate if they qualify for obtaining credit, insurance, or employment. In adhering to these requirements, Midy collects consent from the user before any education data is shared and provides a notification back to the issuing authority (National Student Clearinghouse), without identifying the exact information that was shared. These efforts are designed to promote legal and ethical background checks, protecting both individuals and employers in the process.&nbsp;The magic of this solution lies in the reusable nature of these digital credentials. Individuals hold these credentials (in this case, a government ID card and a diploma) in their Midy wallet, and they can share this data with any integrated party to instantly prove any information held within these documents. This means that the next time they’re asked to verify their name, age, or education, they can do so in a few quick taps – without having to re-scan their government ID or re-do their education verification. Verify once, use anywhere.&nbsp;This pilot with Accenture is the first of several use cases we’re evaluating in the area of education and professional credentials. We’ve also recently integrated Midy with&nbsp;<a href="https://www.credivera.com/">Credivera</a>, a leading exchange for workplace credentialing, to provide our partners with instant access to a wide array of verifiable credentials, including right-to-work checks, licenses, occupational health certifications, and organizational identity credentials.It’s also just the first step in our longer journey with Accenture to unlock the full potential of digital wallets. We’re exploring how this initiative can benefit employers worldwide, and how the same technology can power use cases across industries like travel, finance, insurance, and healthcare. Together, we aim to create a future where verifiable, privacy-preserving, and user-permissioned data exchange is the standard, empowering individuals and businesses alike.

Revolutionizing Recruitment – Gen and Accenture's Pilot Program for Instant, Verified Digital Credentials

Powering Smarter Hiring Decisions with Verifiable Credentials

Corporate Manager

Celebrating the 10th anniversary of the mDevCamp conference, Gen proudly stepped up as the master sponsor, marking our first in-person event in five years. Held in Prague, mDevCamp is Central Europe's premier conference for mobile developers, drawing enthusiasts from across the continent for a day of insightful presentations from companies like Spotify, SoundCloud, Microsoft, and more. This year’s agenda covered essential topics in mobile development, including:<ul><li>Cross-platform development</li><li>Android and Kotlin</li><li>iOS and Swift</li><li>Security measures</li><li>Media technologies</li><li>And much more</li></ul>

Gen led a standout workshop titled "Kotlin Multiplatform - Unleash the Power of Shared Code," which focused on the strategic reuse of business logic from Android apps on iOS platforms. Our session provided a detailed roadmap on achieving efficient code sharing, offering attendees practical tips to enhance their development process. Participants gained insights into common challenges, the evolution of the technology, and the best practices to embark on multiplatform projects. The four-hour workshop was a success, and we extend our heartfelt thanks to all who participated.&nbsp;We're thrilled and excited to more and more people with so much interest in our industry and company, and we welcome talented developers from everywhere. Join us as we continue to explore the frontiers of cybersecurity and mobile development.

Gen sponsors the 10th mDevCamp in Prague, a conference for mobile developers, and hosts its own session for eager learners

Gen Becomes Master Partner of mDevCamp 2024 

President

Looking back at 2023, "Powering Digital Freedom" resonates as more than just an idea — it's been our driving motivation for all the work we did and continue to do. Our goal has always been to develop technology solutions that enable people to explore the digital world safely, securely and confidently. This last year, we've set new standards for protecting consumers and innovating within the security landscape, making the digital world a safer place for everyone. &nbsp; Our achievements, partnerships and forward-thinking vision continue to prove our standing as the leader in Cyber Safety. &nbsp;We’ve hit many major milestones in our first year as Gen. While there is so much to reflect on and celebrate, here are a few highlights.

<h2>Leveraging AI to fight fraudsters: introducing Norton Genie&nbsp;&nbsp;</h2>In response to the evolving sophistication of cyber threats, we introduced Norton Genie to help people take control of their Cyber Safety. This innovative app combines the power of AI with the human intelligence and experience of our teams to combat digital scams, which are becoming more complex and prevalent every day.&nbsp; &nbsp;With proprietary AI models trained on decades of scam and fraud data, Genie provides an accessible and intuitive way for people to intelligently judge the legitimacy of messages across various platforms. Whether dealing with texts, emails or social media messages, Genie operates as a simple yet powerful tool in the fight against digital scams.&nbsp;&nbsp;Our goals for Genie are clear: provide an approachable application that offers a real-time guide for people in a world where scams and fraud are harder to spot than ever. By simply uploading a screenshot of a suspicious message, people can gain immediate insights into its credibility. This accessibility, combined with advanced AI technology, helps to empower consumers to navigate their digital communications confidently and helps to safeguard them against potential threats.&nbsp;&nbsp;&nbsp;&nbsp;

<h2>Partnering with the Open Wallet Foundation to promote Digital Freedom&nbsp;&nbsp;</h2>In today's world, digital connectivity is essential, enabling individuals to shop, bank, learn and connect from virtually anywhere. As we approach an even more digitally integrated future, we're committed to ensuring that this evolution prioritizes people’s safety, privacy and freedom. Our unique approach focuses on creating a future where digital empowerment and security go hand in hand.&nbsp; &nbsp;&nbsp;This year, our partnership with the&nbsp;<a href="https://openwallet.foundation/">Open Wallet Foundation</a>&nbsp;(OWF) marked a significant milestone toward realizing that goal. We advocate for a secure, decentralized means for transactions and identity that turns away from a future where individual companies control people’s data and financial information.&nbsp; &nbsp;The open-source digital wallet, a key goal of the OWF, supports the development of digital wallets that are portable, secure and able to be used on any device, for any service and with any type of data. It’s a sea change for consumer autonomy, offering a solution where privacy, financial information and transaction history are controlled by the individual, rather than individual corporations.&nbsp;&nbsp;<h2>Hitting top 5 for the Fortune Modern Board 25&nbsp;&nbsp;</h2>Our recognition by the&nbsp;<a href="https://fortune.com/ranking/modern-board-25/">Fortune Modern Board 25</a>&nbsp;as having one of the top five most innovative boards in the S&amp;P 500 is a proud reflection of our ongoing commitment to consumer protection.&nbsp; &nbsp;Fortune’s prestigious ranking highlights the diverse and innovation-driven members of our board, stretching from Arizona to Prague. Our board members come from backgrounds that reflect expertise in Cyber Safety and other related fields. Their collective diversity, experience, insight and independence are the driving forces behind our innovative approach to navigating the rapidly changing digital climate.&nbsp;&nbsp;On top of this recognition, we also received other accolades that deserve a mention:&nbsp;&nbsp;<ul><li>One of&nbsp;<a href="https://www.gendigital.com/blog/news/company-news/newsweek-most-trustworthy-companies-2023">America’s Most Trustworthy Companies</a>&nbsp;by Newsweek&nbsp;</li><li><a href="https://www.pcmag.com/articles/best-tech-brands-2024">Best Tech Brands</a>&nbsp;by PCMag, Norton and Avast&nbsp;</li><li><a href="https://www.gendigital.com/blog/news/innovation/se-labs-awards">Best Home and Free Anti-Malware</a>&nbsp;by SE Labs, Norton 360 and Avast Free Antivirus&nbsp;</li><li><a href="https://www.gendigital.com/blog/news/innovation/av-test-awards">Best Protection</a>&nbsp;(Windows) by AV-Test, Norton, Avast, AVG and Avira&nbsp;</li></ul><h2>Honoring our responsibilities and creating a culture of giving&nbsp;&nbsp;</h2>We’re committed to making a real impact. And, for us, the best way we know how is to connect our passions with technical knowledge to provide Cyber Safety education and data privacy training around the world. With partners like Nasscom Foundation, Czechitas and The Trevor Project, we’re able to support and empower people of all ages and from all walks of life.&nbsp;From large-scale efforts like $424K donated on Giving Tuesday, our&nbsp;<a href="https://www.gendigital.com/blog/impact/community/gen-volunteer-day-2023">Global Volunteer Day</a>, and Back-to-School volunteering to individual efforts for sustainability, 2023 has been full of&nbsp;<a href="https://www.gendigital.com/us/en/social-impact/social-impact-report/">positive impact</a>&nbsp;that people can feel. We’re very grateful that others have recognized us for that.&nbsp;<ul><li>One of&nbsp;<a href="https://www.newsweek.com/rankings/americas-most-responsible-companies-2024">America’s Most Responsible Companies</a>&nbsp;by Newsweek&nbsp;</li><li><a href="https://bit.ly/3RktM1Z">Dow Jones Sustainability North America Index</a>&nbsp;by S&amp;P Global&nbsp;</li><li><a href="https://www.pointsoflight.org/press-releases/points-of-light-announces-2023-honorees-of-the-civic-50-and-releases-key-insights/">The Civic 50</a>&nbsp;by Points of Light&nbsp;</li></ul>Our social impact work helps us to bring equity, opportunities and safety to people all over the globe.&nbsp;&nbsp;

<h2>Our commitment to innovation and protection continues&nbsp;&nbsp;&nbsp;</h2>As we look to the future, our dedication to protecting people around the world from scams, viruses, malware and other exploits remains steadfast. Gen stands to be at the forefront of Cyber Safety innovation and our global reach informs our understanding of cultural nuances and vulnerabilities in our fight against cyberthreats. For 2024, we’ll continue to adapt and address the ever-evolving threat landscape, now exacerbated by weaponization of AI, to provide comprehensive protection for people worldwide.&nbsp;&nbsp;We're proud of the strides we've made in our purpose of Powering Digital Freedom and excited for what lies ahead. We invite you to delve deeper into our accomplishments and future plans by visiting the&nbsp;<a href="https://newsroom.gendigital.com/">Gen newsroom</a>&nbsp;and exploring our&nbsp;<a href="https://www.gendigital.com/us/en/family-of-brands/">product advancements</a>.&nbsp;&nbsp;Together, we can continue to shape a future where Digital Freedom and security are not just ideals but realities for everyone. Join us in creating a safer digital tomorrow.&nbsp;&nbsp;&nbsp;