Protection Overview shows the native security protection provided by Bailian, covering the modules, protection items, and interception status of Agents in the current business space.
Overview
Bailian Agent Studio provides native security protection for Agents across the entire chain of development, runtime, data, memory, and ecosystem. Through asset inventory, risk interception, and recording of risk events and operation logs, it forms an inventory · discover — intercept · protect — audit · trace security loop. Protection Overview helps you understand which modules and protection items cover Agents in the current business space, as well as the risk interception status; default protection takes effect automatically once an Agent uses the corresponding module. Page data refreshes approximately every 2 minutes; see the top of the page for the exact update time.
Default protection is automatically enabled as Agents are used, with no separate configuration required. The page focuses on status viewing and capability descriptions, and does not provide an advanced protection activation entry. The activation entry for advanced protection is located on the Security Policy page.
Protection Scope
| Agent Type | Protection Scope | Description |
|---|---|---|
| Flow Agent | Input/output content security | Content security detection for Agent input and model output |
| Managed Agent | Runtime behavior security | Sandbox isolation, tool call interception, credential isolation |
| RAG | Knowledge base content security | Upload file pre-scan, knowledge base content detection |
| Memory | Memory content security | Content security detection for memory read/write |
| Store | MCP/Skill component security | Supply chain static scan, component security detection |
Protection Panorama
The protection panorama displays protection coverage for Flow Agent, Managed Agent, RAG, Memory, and Store modules. Hover over a module to view its protection highlights.
| Term | Description |
|---|---|
| X modules in protection | Number of modules used by Agents in the current business space (Flow Agent, Managed Agent, RAG, Memory, Store) |
| X currently unused | Number of modules not used by Agents in the current business space |
| X Agents automatically protected | Number of Agents in the current business space that use the module |
Risk Interception
When a protected object identifies or intercepts a risk, it is presented through the risk interception card. The interception count is cumulative — the total number of intercepted risk items since the Agent started being used, up to the time presented on the card.
| Interception Type | Description |
|---|---|
| Content Security I/O Interception | Content security detection for Agent input and output, intercepting non-compliant content. Shows cumulative interception count and cumulative detection count |
| Skill Static Scan | Static security scanning for uploaded Skills to detect malicious code and risky dependencies. Shows cumulative interception count and cumulative scan count |
| Upload File Pre-scan Interception | Pre-scan for files uploaded to RAG knowledge bases or Agent sandboxes, intercepting risky files. Shows cumulative interception count and cumulative detection count |
Protection Capabilities
The security protection card on the right side of the page displays key protection capabilities:
| Protection Capability | Description |
|---|---|
| Agent Identity Issuance | Issues identity credentials for Agents, forming the basis of Agent asset inventory and access control |
| Content Security | Detects sensitive and compliance issues in uploaded files, Agent input and output, and model call input and output |
| Supply Chain Static Scan | Static scanning for Skills to detect risks |
| Credential Isolation & Session Lifecycle Governance | Native security measures provided by the Managed Agent runtime sandbox |
If you have initiated and completed the self-built content security approval, the content security item will display "Disabled".
Related Pages
- Agent Assets: View the full asset inventory associated with Agents
- Security Policy: Enable advanced protection policies on demand