AI SECURITY • 336 / 397
Understand how untrusted text, tools and autonomy create new attack paths.

Denylist

A denylist explicitly blocks known disallowed items but permits other items by default.

Think of it like

Think of Denylist as an input-trust or privilege problem: words can influence software decisions, so boundaries must be explicit.

Real life

Email, documents and web pages can become hostile inputs to AI systems through attacks involving Denylist.

SRE lens

Useful as a secondary control, but usually weaker than an allowlist for sensitive tools.

Remember thisA denylist explicitly blocks known disallowed items but permits other items by default.
AIForSREJump to a concept
Search is optional. The main journey is simply ↓ Next.