Agent Guidelines
Agent guidelines are secure coding instructions that OX provides to AI coding agents to help them generate code without introducing vulnerabilities.
When a developer submits a prompt to an AI coding agent, OX analyzes the prompt and determines which vulnerabilities could potentially be introduced by implementing the requested functionality. OX then returns the relevant secure coding guidance based on the predicted vulnerability and the programming language being used.
The guidance is provided to the AI coding agent before code generation begins and is applied automatically in the background. As a result, the agent generates code using secure implementation patterns from the outset, reducing the likelihood of introducing security vulnerabilities.
The Agent Guidelines page shows all guidelines available to your organization's AI coding agents. Each guideline targets a specific vulnerability and programming language combination.
The Agent Guidelines page shows all guidelines available to your organization's AI coding agents. Each guideline targets a specific vulnerability and programming language combination.
In addition to the built-in guidelines provided by OX, you can create custom guidelines that reflect your organization's security requirements. Custom guidelines allow you to define when a guideline should be applied and what secure coding instructions should be provided to AI coding agents when the specified conditions are met.
Guidelines list
Use the filters and search box above the list to find specific guidelines.
Toggle
Enables or disables the guideline. Enabled guidelines can be applied to AI coding agents when their activation criteria are met. Disabled guidelines are ignored. Guidelines that are still training cannot be enabled or disabled until training completes.
Name
The guideline name and target language.
Category
The category the guideline belongs to, such as Code Security or CI/CD.
Language
The programming language the guideline targets.
Created By
Indicates whether the guideline was provided by OX or created by your organization.
Actions
Opens additional actions for the guideline.
Filtering guidelines
Category
Filters guidelines by category. Select All to display guidelines from all categories.
Language
Filters guidelines by programming language. Select All to display guidelines for all supported languages.
Created By
Filters guidelines by author. Select All to display both OX-provided and custom guidelines.
Status
Filters the list by guideline status (Enabled, Disabled, or Training). Select All to display all guidelines.
Search
Searches for guidelines by name.
Creating custom guidelines
In addition to the OX-provided guidelines, you can create custom security guidelines that enforce your organization's secure coding requirements.
To create a custom guideline:
On the Agent Guidelines page, select Create New.
Enter the guideline information:
Guideline Name
A unique name that identifies the guideline. Choose a descriptive name that reflects the security rule being enforced.
Description
An optional description that explains the purpose of the guideline.
Category
The security category the guideline belongs to. Categories help organize guidelines by the type of security concern they address.
Activate this guideline when
Defines the condition that triggers the guideline. OX evaluates developer prompts against this condition to determine whether the guideline should be applied.
Agent Instruction
Defines the secure coding instruction that OX provides to the AI coding agent when the guideline is triggered.
Language
Specifies the programming language or languages that the guideline applies to. The guideline is evaluated only for prompts targeting the selected languages.
Select Next.
Review and fine-tune when the guideline should be applied.
Select Next.
Review the configuration and select Done to create the guideline.
After the guideline is created, OX trains its detection model before the guideline becomes available.
Guideline training
New custom guidelines initially appear with the Training status.
During this stage, OX trains the detection model that identifies prompts matching the guideline's activation criteria. Training typically completes within several minutes.
After training finishes:
The guideline is automatically enabled.
The Training status disappears.
The guideline becomes available for AI coding agents.
Last updated