Uber Open-Sources ADR, the Agent Security Stack It Runs in Production
Uber just open-sourced ADR, short for Agentic Detection and Response, and the name tells you the ambition: EDR was endpoint detection for the laptop era, ADR wants to be the equivalent for the agent era. This is not a demo, it is the system Uber deployed in production to watch the AI agents its own employees and customers touch, and the paper behind it was accepted to MLSys 2026.
Three pieces ship under Apache 2.0. A sensor that collects telemetry from agent activity across seven-plus tools, including Cursor and Claude Code, on multiple operating systems. A security benchmark with over 300 tasks spanning 133 MCP servers. And a dual-agent threat detector, one agent watching what the other agents do. The offensive red-teaming engine, called Explorer, stays closed for now, which is a reasonable call for a dual-use component.
The interesting fact is who shipped it. The agent-security conversation this year has been carried by incidents, prompt injection papers, and startups selling gateways. This is the first large non-AI enterprise publishing the full defensive stack it actually runs, benchmark included. When companies start open-sourcing their internal agent SOC tooling, it means agents inside big enterprises are no longer an experiment, they are an attack surface with a budget.
Repo at github.com/uber/ADR, trending on GitHub today from a near-zero base.
← Back to all articles
Three pieces ship under Apache 2.0. A sensor that collects telemetry from agent activity across seven-plus tools, including Cursor and Claude Code, on multiple operating systems. A security benchmark with over 300 tasks spanning 133 MCP servers. And a dual-agent threat detector, one agent watching what the other agents do. The offensive red-teaming engine, called Explorer, stays closed for now, which is a reasonable call for a dual-use component.
The interesting fact is who shipped it. The agent-security conversation this year has been carried by incidents, prompt injection papers, and startups selling gateways. This is the first large non-AI enterprise publishing the full defensive stack it actually runs, benchmark included. When companies start open-sourcing their internal agent SOC tooling, it means agents inside big enterprises are no longer an experiment, they are an attack surface with a budget.
Repo at github.com/uber/ADR, trending on GitHub today from a near-zero base.
Comments