Overview
Noma Security is an AI security company whose research arm Noma Labs discloses vulnerabilities in agentic-ai deployments. The firm focuses on prompt injection, agent workflow abuse, and cross-repository data exfiltration in production AI automation.
Recent Developments
- 2026-07-07: Disclosed gitlost — critical indirect prompt-injection in github Agentic Workflows enabling unauthenticated private-repo data exfiltration via crafted public issues (2026-07-07-github-gitlost-agentic-workflows-vulnerability)