Post-mortem: how a LangChain agent deleted 847,293 users in production
Technical reconstruction of a real incident. An AI agent with Postgres access generated a DELETE FROM users without WHERE that wiped the entire table in under 200ms.
AST parsing for SQL security: how pg_query works under the hood
pg_query is the binding of libpg_query, PostgreSQL's official parser. In this article we show how Vericto uses it to build the complete syntax tree of every query.
How to use Vericto's audit trail as direct evidence in SOC2 audits
SOC2 Type II auditors need evidence of data access controls. Vericto's immutable audit trail, signed with Ed25519, directly satisfies CC6 and CC7 criteria.
MCP servers and SQL security: the ecosystem growing without a protection layer
MCP servers expose databases directly to AI agents. In 2026, the MCP ecosystem grows 3x YoY, without any existing implementation including a deterministic security layer.
Shift-left SQL security: validating migrations in CI/CD before deploy
73% of production data loss incidents occur during deployments. We show how to integrate Vericto's CLI into GitHub Actions to block destructive migrations before merge.
Benchmark: Vericto latency vs direct Postgres connection with 10M queries
Methodology, results, and source code of the benchmark measuring the real overhead of Vericto's AST proxy. p50, p95, p99 and max percentile under different workloads.