Monofor Certified AI Security Professional
Validates that you can secure AI agents end to end: govern them as owned non-human identities, put models, MCP tools and agent-to-agent calls behind the Monosign gateways, inspect AI traffic with AI flows, control shadow AI and spend, produce evidence for auditors, and give agents short-lived machine credentials in Monopam. Written for Monosign v2026.11 and Monopam v2026.09.
Who it is for: Security architects, identity administrators and partner engineers who design and run controls for AI agents, AI assistants and the models and tools they use.
Version 4 · updated Nov 10, 2026What changed?
Exam domains
Weighting of questions per domain (exam guide).
Recommended preparation
AI security professional learning plan
Govern AI agents as non-human identities, put models, MCP tools and agent-to-agent calls behind the Monosign gateways, add guardrails, spend control and evidence, give agents short-lived credentials in Monopam, and practise in the MCP gateway lab.
AI security with Monofor: gateways, guardrails and machine credentials
Build the full AI security stack: a threat model for agents, v2026.11 agent budgets and approvers, the AI, MCP and A2A gateways, AI flows, shadow AI and spend control, evidence for auditors, and short-lived machine credentials in Monopam. Written for Monosign v2026.11 and Monopam v2026.09.
Securing AI agents with Monosign
Give every AI agent an owned identity, control delegation with on-behalf-of tokens, govern MCP tool calls through the gateway and keep humans in the loop. Written for release v2026.10.
Lab: Govern AI agents in the MCP catalog
Register an AI agent with an owner, add an MCP server to the catalog, allow only the tools it needs, decide approvals for a destructive tool and stop the agent with the kill switch. The MCP gateway service is a separate component that this lab does not install, so a small lab client, ticket-agent, reads the same catalog and approvals in its place.
Just-in-time access with Monopam
Replace standing privilege with time-bound grants. Publish a request catalog, route requests to approvers, revoke early when needed and shorten how long credentials live.