Security Policy is designed for customers with higher security requirements, providing 7 advanced protection policies that can be enabled on demand. This page shows the status and protection capabilities of each policy, and supports adjustments via Go to Security Configuration.
Access
Click Security in the navigation bar, then select Advanced Protection > Security Policy from the left menu to access the Security Policy page.
Security policy configuration applies globally to all Agents under this account, regardless of business space. Please assess the impact scope before modifying policies.
Overview
Unlike the native protection provided by Protection Overview, the protection items in Security Policy (under the Advanced Protection menu) require service authorization and formal activation before use. This feature is currently free for a limited time.
Advanced protection currently supports policy configuration and risk monitoring. Automatic risk blocking or interception is not yet supported.
Policy List
Advanced protection provides 7 security policies:
| Security Policy | Protection |
|---|---|
| Prompt Attack | Detects prompt injection and prompt attack risks targeting Agents |
| Sensitive Data Leakage | Detects sensitive data leakage risks in Agent input and output |
| Tool Call Security | Detects risky operations during Agent tool calls |
| RAG Data Poisoning | Detects risks of knowledge base data being poisoned or tampered with |
| Knowledge Base and Memory Theft | Detects risks of knowledge base and memory content being maliciously accessed |
| Identity and Security Credentials | Detects risks of Agent identities and security credentials being abused |
| Content Security | Detects sensitive and compliance issues in uploaded files, Agent input and output, and model call input and output |
Adjusting Policies
To disable or adjust specific security policies, click Go to Security Configuration on the page. You will be redirected to the relevant page in the Agent Security Center for configuration.
Related Pages
- Protection Overview: View protection panorama and interception statistics
- Risk & Audit: View risk events and audit logs