Documentation
Blog
ISO/IEC 42001 — Where Do I Even Start? What Comes First?
A practical starting guide for ISO/IEC 42001 certification, covering the standard's perspective, scope definition, and stakeholder identification before building an AI management system.
July 12, 2026
Blog
Claude Fable 5's Challenge of "Redefining Management": 5 Strategies for Integrating Mythical AI into Organizational Decision-Making
How will the arrival of Claude Fable 5 change the nature of management decision-making? This article explains five strategies for CxOs to turn this "mythical" AI with PhD-level reasoning into an organizational weapon while mitigating risk. It also covers the frontlines of governance and security.
June 11, 2026
Introduction Decks
QueryPie AIP Introduction
Everything You Need to Know About QueryPie AIP
Blog
AI Work OS: How a new intelligence works within an enterprise
Now that AI has become a new intelligence working alongside humans within enterprises, organizations need context that AI can understand, an execution structure to perform actual tasks, and an operational system to safely control that execution.
June 16, 2026
Manuals
QueryPie AIP Manual
A guide page for the QueryPie AIP user guide, feature usage, and operating flow.
Introduction Decks
QueryPie ACP Introduction
Everything You Need to Know About QueryPie ACP
Manuals
QueryPie ACP Manual
A guide page that brings together administrator and user documentation for QueryPie ACP.
White Papers
The End of SaaS, or Its Evolution? — Strategies SaaS Companies Must Adopt in the Age of AI Agents
This white paper analyzes the impact of AI agents on the SaaS business, outlines the strategies SaaS companies should adopt, and shares the real story of QueryPie AI's transformation from a SaaS vendor to an AI-native company.
Manuals
QueryPie ACP User Manual
A guide page for basic user operations and day-to-day QueryPie usage.
Blog
AI Attack Tools Breach 600 Firewalls Across 55 Countries: How to Protect the Data Beyond the Firewall
An AI-powered open-source attack platform breached 600+ FortiGate firewalls across 55 countries. An unskilled threat actor leveraged AI to execute attacks at scale. This article analyzes the CyberStrikeAI incident and presents a defense-in-depth framework for CxOs to protect data beyond the firewall.
March 9, 2026
White Papers
Guardrail Design in the AI Agent Era (2026 Edition) — Part 1: Philosophy & Design
As AI agents move from conversational assistants to autonomous executors, enterprises need stronger control systems. This 2026 guide explains a four-element guardrail framework—Permission, Approval, Audit Trail, and Kill Switch—for CxOs and operational leaders.
Manuals
QueryPie ACP Administrator Manual
A guide page for administrator setup, operations, and permission management procedures.
Blog
AI Security Threat Map 2026 | 7 Attack Vectors and Practical Defense Framework for CxOs
AI security is not an extension of traditional cybersecurity—it requires an additional defense layer. Explore 7 AI-specific attack vectors including prompt injection and model supply chain threats, with an OWASP and NIST-aligned governance framework for CxOs.
March 3, 2026
White Papers
Guardrail Design in the AI Agent Era (2026 Edition) — Part 2: Practice & Implementation
A practical implementation guide for AI-agent guardrails. Includes three case studies (PC-operation agents, development AI vulnerabilities, and autonomous 5G operations), a reusable checklist, and a 90-day rollout roadmap.
Manuals
QueryPie ACP Release Notes
A guide page for checking the latest product updates, added features, and improvements.
![[2026 Update] The Full Scope of Shadow AI Risk: 5 CxO Actions to Prevent Data Leaks and Compliance Violations](/documentation/blogs/b-thumb-27.webp)
Blog
[2026 Update] The Full Scope of Shadow AI Risk: 5 CxO Actions to Prevent Data Leaks and Compliance Violations
Shadow AI is now a board-level business risk. IBM reports that breaches linked to shadow AI cost an average of $4.63M. This article explains five concrete actions for CxOs to prevent data leakage, compliance failures, and NDA violations, backed by the latest data.
February 20, 2026
![Comparative Evaluation of LLMs for a Domain-Specific Pipeline Focused on Code Generation and Agentic RAG [Part 1]](/documentation/white-papers/thumbnail-11.webp)
White Papers
Comparative Evaluation of LLMs for a Domain-Specific Pipeline Focused on Code Generation and Agentic RAG [Part 1]
Do not blindly trust LLM benchmarks. Evaluate and select the LLM best suited to your domain yourself. This is the first part of a study that systematically compares 13 LLM configurations on a real Japanese payroll-system pipeline.
Glossary
QueryPie AI Glossary - Key Terms and Definitions
Access QueryPie AI's glossary of key terms related to data governance and security. Learn essential terminology for understanding our platform and the industry.
Manuals
QueryPie ACP OpenAPI Reference
A guide that collects entry points to the QueryPie ACP OpenAPI Reference and related developer resources.
White Papers
Comparative Evaluation of LLMs for a Domain-Specific Pipeline Focused on Code Generation and Agentic RAG [Part 2]
We present a comprehensive analysis of experimental results across 13 LLM configurations. We reveal unexpected pitfalls in "Thinking" mode, stability issues with GPT, and the optimal pipeline setup that achieves a 60% cost reduction.
White Papers
Why Japanese Enterprises Are Accelerating Their AI Transformation Now
A concise, executive guide that diagnoses Japan’s AI gaps and delivers a pragmatic roadmap to turn AI into enterprise-wide productivity and growth.
Events
Join FINDY's CTO and QueryPie for an AI & MCP Online Seminar
Learn how to build an MCP server in just 10 minutes! We'll walk you through it with a live coding session in Korean. If you're curious about AI or MCP, don't miss out!
May 19, 2025
Blog
Top 10 Privileged Access Management (PAM) Solutions You Should Know
Discover the top 10 Privileged Access Management (PAM) solutions that are essential for modern enterprise security, featuring comprehensive leading platforms that provide advanced credential management, zero-trust access control, and automated security features to protect your organization's critical IT infrastructure in today's rapidly evolving digital landscape.
August 11, 2025
White Papers
RAG 2.0 Security: Microsoft and Meta’s Groundwork, QueryPie Builds the Bridge
This article introduces the background and security architecture of RAG 2.0 and emphasizes the importance of execution flow control through various corporate cases. RAG 2.0 is differentiated from existing RAGs in that it goes beyond simple document search and applies policies in real time to prevent sensitive information from being delivered to the wrong users.
White Papers
Your Architecture vs. AI Agents: Can MCP Hold the Line?
In this article, we clearly distinguish the roles of the MCP server and AI agents, providing a structured explanation of their respective responsibilities and limitations to prevent misunderstandings.
Events
Webinar Registration: Information Leakage Prevention and Internal Security Measures Seminar
Are your information leakage prevention measures sufficient? It will be too late after an incident occurs!
December 5, 2024
Blog
How Much Can We Trust AI? The Naked Truth of AI Agent Security Through the Replit Incident
The incident where Replit AI Agent deleted a production DB is not just a technical mistake, but highlights the importance of security architecture when deploying AI agents in real environments. This case summarizes a security checklist including AI hallucination detection, least privilege design, and execution log retention.
July 29, 2025
White Papers
Welcome to the Age of AgentSecOps—Code Stands Still, Agents Take Over
As AI agent–based automation systems continue to proliferate, we’ve moved beyond simple task automation to a new paradigm: AgentOps, where autonomous agents make decisions and interact with external systems on their own. In this article, we explore the emerging concept of AgentSecOps—security operations tailored for agent-driven environments—and take a deep dive into how its structure and role compare to traditional DevSecOps frameworks.
Events
Episode 4 QueryPie KAC: Knockout Kubernetes! - Multi Kubernetes Clusters, Kubernetes Resources, Pod Access History
In Episode 4, we explored how to maintain a robust security environment even in Kubernetes environments by utilizing "QueryPie KAC (Kubernetes Access Controller)," QueryPie's Kubernetes access control solution.
November 29, 2024
Blog
AI Rebels Are Becoming Reality — Why We Need AI Red Teaming
AI is no longer just generating answers — it’s executing real-world actions. Through real incidents and case studies, QueryPie explains emerging AI security threats like command refusal and indirect prompt injection, and why AI Red Teaming is now essential.
June 10, 2025
White Papers
Beyond MCP to MCPS: The Need for a Secure Protocol for Enterprise AI
MCP(Model Context Protocol) is innovative, but it has a critical weakness for use in enterprise environments. In this article, we will look at the basic concepts and current status of MCP, and deeply analyze the security issues that arise in enterprise environments.
Events
Ep. 4 QueryPie KAC: Kubernetes One Strike!—Multi K8s clusters, yap! K8s resources, yap! Pod access history, yap!
In Episode 4, we explored how to maintain a robust security environment in Kubernetes using QueryPie's Kubernetes access control solution, 'QueryPie KAC (Kubernetes Access Controller)'.
November 29, 2024
White Papers
Google Agentspace Gets Things Done—QueryPie MCP PAM Keeps Them Safe
Google Agentspace is a powerful AI execution platform, but unchecked automation raises security concerns. This post explores how QueryPie MCP PAM enables secure, policy-based control for enterprise-grade AI adoption.
Blog
Next.js Server Action and Frontend Security
Next.js Server Actions' high-level abstractions may lead developers to make security mistakes. This article analyzes these risks and presents development strategies to prevent security errors. Enhance your security awareness when developing server-side code in the frontend to build safer and more efficient web applications!
March 20, 2025
Events
Episode 3 QueryPie SAC: Breaking Down the Barriers of Server Management! - Large-Scale Server Management, Auto-Scaling, Permissions and Policies
In Episode 3, we will explain in detail how to efficiently manage numerous permissions across a large number of servers and multi-cloud environments using QueryPie's system access control solution, "QueryPie SAC (System Access Controller)."
November 29, 2024
White Papers
Uncovering MCP Security: Threat Mapping and Vulnerability Analysis through Literature-based Investigation
As AI systems become increasingly interconnected, context sharing between models is critical to ensure reliable reasoning and secure execution. This white paper analyzes recent research on the Model Context Protocol (MCP), identifies key security threats, and proposes a next-generation architecture—MCP PAM—for context-aware access control and autonomous policy enforcement.
Blog
Cost Optimization through EC2 Automation: Leveraging AWS Lambda and EventBridge
Learn how to optimize EC2 costs by automating instances with AWS Lambda and EventBridge. This guide explores best practices for cost reduction through serverless solutions.
February 7, 2025
Events
Ep. 3 QueryPie SAC: Smashing Server Management Hurdles!—Mass Server Management, Yap! Auto-Scaling, Yap! Permissions and Policies, Yap!
In Episode 3, we took a close look at how to efficiently manage numerous permissions across a large number of servers and multi-cloud environments using QueryPie's system access control solution, 'QueryPie SAC (System Access Controller)'.
November 29, 2024
White Papers
AI Can Drive Itself—Why Not Secure Itself? Introducing Autonomous Access Control
In an era where AI directly executes system operations, traditional security models are no longer enough. This white paper introduces a new security paradigm for MCP-based AI execution environments—QueryPie MCP PAM—and outlines strategic approaches to achieving Autonomous Access Control.
Blog
Why is SSO important?
Understand why Single Sign-On (SSO) is crucial for enhancing user experience, streamlining access, and improving security across multiple platforms. See the benefits today!
February 4, 2025
Events
Episode 2 QueryPie DAC: Solving Database Challenges! - Database Integrated Management, NoSQL, Ledger Data
QueryPie's DB Access Control (QueryPie DAC) plays a central role in strengthening security for accumulated sensitive information, simplifying access control and management, and ensuring security stability. We will explain how to safely manage vast amounts of sensitive information and data in a multi-cloud environment.
November 29, 2024
White Papers
MCP PAM as the Next Step Beyond Guardrails
As generative AI adoption accelerates, traditional guardrails fall short in securing real-world LLM integrations. This whitepaper explores how MCP-based Privileged Access Management (PAM) complements existing safeguards to enforce user-intent-aware, context-driven control over AI operations—addressing threats like prompt injection, insider abuse, and sensitive data leakage.
Blog
Demystifying Privileged Access Management: Insights, Comparisons, and Practical Applications
Discover how PAM strengthens security by managing and monitoring privileged access, reducing risks to critical data.
January 23, 2025
Events
Ep. 2 QueryPie DAC: Crushing DB Concerns!—DB Integrated Management, Yap! NoSQL, Yap! Ledger Data, Yap!
QueryPie's DB Access Control (QueryPie DAC) plays a central role in strengthening security for accumulated sensitive information and enabling convenient access control and management to ensure security stability. We explored methods for reliably managing vast amounts of sensitive information and data in a multi-cloud environment.
November 29, 2024
White Papers
Security Governance and Integrated PAM Strategy for AI Agents in the Age of the Model Context Protocol (MCP)
Learn how integrating Privileged Access Management (PAM) into the Model Context Protocol (MCP) framework strengthens AI governance, enhances visibility, and mitigates emerging security risks in enterprise environments.
Blog
Healthcare Data Security: Protecting Patient Privacy and Ensuring Compliance
Discover how to safeguard healthcare data with advanced security measures, ensuring patient privacy, compliance, and protection from data breaches. Learn more now!
January 17, 2025
Events
Episode 1 QueryPie Integration: Striking at the Heart of Automation! - SCIM, Vault, and Slack Approval Workflow Integration
Have you ever wondered what features QueryPie has and what roles each of them plays? In Episode 1, we explored the key features of the QueryPie product on behalf of our customers.
November 29, 2024
White Papers
Secure Server Access in an Era of Network Isolation: Multi-hop Bidirectional Tunneling via the SSH Protocol
As enterprises adopt network isolation, secure access to internal servers becomes more complex. This white paper outlines the limitations of traditional SSH methods and explains how QueryPie enables seamless, scalable server access through multi-hop tunneling and centralized control—without exposing intermediate credentials.
Blog
Zero Trust Security: Redefining Cybersecurity in a Hyper-Connected World
Understand how Zero Trust Security can protect your business by continuously verifying users, devices, and networks, ensuring stronger defense against threats. Explore it now!
January 16, 2025
Events
Ep.1 QueryPie Integrations: Hitting the Core of Automation!—SCIM, yap! Vault, yap! Slack approval workflow integration, yap!
Are you curious about what features the QueryPie product has and what roles each feature plays? In Ep. 1, we explored the key features of the QueryPie product on behalf of our customers.
November 29, 2024
White Papers
Optimal Method for Using a Terminal with Seamless SSH Connection
Discover an optimal method for seamless SSH connections that enhances security without disrupting the CLI workflow. Learn how QueryPie’s approach eliminates the need for additional agents while maintaining robust access control.
Blog
Mastering Data Observability: Insights, Techniques, and Best Practices
Understand QueryPie's commitment to an agentless approach for streamlined and secure system management.
January 9, 2025
![The full-scale customer communication content [Ch. QueryPie: 3-Step Side Kick] is here!](/documentation/events/3dk-intro-ko.webp)
Events
The full-scale customer communication content [Ch. QueryPie: 3-Step Side Kick] is here!
We prepared this for those who want to learn more about QueryPie and have many questions. From DB access control, system access control, Kubernetes access control, web application access control, to data discovery... We've extracted the core essentials of QueryPie, which encompasses access control and audit solutions covering enterprise infrastructure across cloud and on-premises environments.
November 29, 2024
White Papers
QueryPie gRPC DAST Security: ZAP Custom Script Example
Learn how QueryPie leverages gRPC communication for high performance and stability in web applications.
Events
Achieve Perfect ZTNA Security with Prisma Access!
Why Did QueryPie Choose Prisma Access? Dive into the details of how QueryPie identified Prisma Access as the ultimate choice for their security needs.
November 29, 2024
Blog
What businesses can learn from Sentiment Analysis
Learn how sentiment analysis can boost your business by understanding customer emotions, refining strategies, and enhancing satisfaction. Explore its power today!
April 26, 2022
White Papers
Efficient Storage and Management of Large-Scale Audit Logs (OVEN)
Guiding efficient storage and management of large-scale audit logs while meeting security and compliance requirements.
Events
Flex Unveils the Secrets of QueryPie
Flex, Korea's top HR platform, unveils the surprising revelations they discovered after integrating QueryPie into their system. What hidden magic in QueryPie completely captivated the Flex team and transformed the way they work?
November 29, 2024
Blog
Data Leaks: How a Small Internal Breach Can Turn into a Disaster
Explore how small internal breaches can escalate into major data leaks and how QueryPie helps mitigate risks effectively.
November 22, 2024
Events
Achieving device security through MDM: Kandji x QueryPie
In this webinar, our security experts Brant Hwang (CEO, QueryPie) and Kenny Park (CISO, QueryPie) discuss how to secure your Apple devices and utilize Kandji’s powerful, purpose-built tools to create an intuitive, streamlined experience for admins and users alike.
November 29, 2024
Blog
QueryPie x Figma: The Ultimate Guide to Seamless Collaboration
Discover how QueryPie and Figma ensure seamless collaboration for design and development teams, boosting productivity.
November 22, 2024
White Papers
QueryPie’s DevSecOps Pipeline: Proven to Enhance Development Speed and Stability
Streamline development with QueryPie's DevSecOps pipeline for enhanced speed, stability, and security.
Events
Okta x PaloAlto Networks x QueryPie: The OPQ Webinar
Going beyond cloud security to cloud-native security, the OPQ Alliance (Okta x Palo Alto Networks x QueryPie) will show you the way. Watch this three-part webinar to learn more!
November 29, 2024
Blog
A Peek Into a Day in the Life of QueryPie TPM Team: The Secret to Winning Over Customers
A glimpse into QueryPie TPM's daily efforts to win customer trust and deliver exceptional results with effective strategies.
November 22, 2024
White Papers
QueryPie’s New Standard for Penetration Testing
QueryPie sets a new benchmark in penetration testing to prevent vulnerabilities and secure systems effectively.
White Papers
Secure Login Token Management: An Essential Frontend Strategy
Secure user authentication with QueryPie's login token management, enhancing frontend security and data protection.
Events
Discover the shortest path to getting certified in the cloud era with our best practices
Are you going round in circles trying to get certified? Discover the shortest path to getting certified in the cloud era with our best practices.
November 29, 2024
Blog
Your New Ally in Data Privacy and Management: Data Discovery
Learn how QueryPie's data discovery tools enhance privacy management and ensure compliance with global data regulations.
November 22, 2024
White Papers
Revolutionizing Security Management with Policy as Code (PaC)
Automate and optimize security protocols using QueryPie's Policy as Code, ensuring compliance and reducing risks.
Manuals
QueryPie ACP Community Edition Installation Guide
QueryPie ACP Community Edition is a free version that lets you experience all the core features of QueryPie ACP Enterprise — including Database, System, Kubernetes, and Web Access Controllers — with a maximum limit of 5 users. Get started quickly with a simple installation.
VOC
"The solution that best fit our automation strategy was undoubtedly QueryPie!"
How did LG U+ implement Zero Trust in a public cloud environment? Discover how QueryPie helped automate security & access control!
March 24, 2025
Blog
QueryPie PM’s Work Smarts: Transforming into a True All-Rounder
QueryPie PM insights on becoming an all-rounder through effective work strategies and cross-functional collaboration.
November 22, 2024
White Papers
Access Control for Secure Operation of Kubernetes Clusters
QueryPie ensures secure Kubernetes access control for improved cloud cluster management and operational security.
VOC
"The adoption of AI in traditional industries hinges on data and security as the keys to success."
In this video, we have the privilege of featuring Hyun Kim, the CEO and Founder of Superb AI.
January 6, 2025
Blog
The Overlooked Command Bypass Issue: Let’s Finally Talk About It!
Addressing the overlooked risks of command bypass issues and how QueryPie offers advanced solutions to prevent them.
November 22, 2024
White Papers
Preventing Command Bypass at the Source with Process-Tracking Methods
Prevent command bypass threats at the source with QueryPie's innovative process-tracking methods.
VOC
"Beyond monitoring, it’s true governance."
In today's video, we have the privilege of featuring Mori Takeshi, the CEO of AIR Company Limited in Japan. AIR, also as one of QueryPie Japan's partners, they have been lead IT & software market in Japan for last decades.
November 29, 2024
Blog
QueryPie’s New Paradigm: Beyond Integration, Toward True Connectivity
QueryPie introduces a new paradigm, emphasizing true connectivity beyond mere system integration for better collaboration.
November 22, 2024
White Papers
Building a Transaction-Free, Flawless CDC (Change Data Capture) System
Sync data seamlessly with QueryPie's CDC system, ensuring conflict-free updates without transactions.
VOC
"QueryPie' s like a tailor shop almost for security."
Today, we have a special guest with us: Tom Lee, the CEO and Co-founder of LOVO AI.
November 29, 2024
Blog
QueryPie’s Stride & Sustainability by Converging Technology and Humanities
How QueryPie merges technology with humanities to drive innovation and ensure long-term sustainability.
November 22, 2024
White Papers
Core Technology for Parsing SQL Across Multiple Vendors: QSI (Query Structural Interface)
Enhance system security with QueryPie's native command control through an advanced SSH proxy architecture.
VOC
"I envision a bright future, similar to the global business outcomes of QueryPie."
In today's video, we have the privilege of featuring Changsu Lee, the CEO and Founder of Allganize.
November 29, 2024
Blog
From Chaos to Order: Revolutionizing Multi-Cloud Kubernetes Access Control
QueryPie's approach to streamlining multi-cloud Kubernetes access control for enhanced security and operational efficiency.
November 22, 2024
White Papers
Shell Native Command Control through SSH Proxy Architecture
Enhance system security with QueryPie's native command control through an advanced SSH proxy architecture.
Blog
Secrets of Successful Teams? Work Like QueryPie!
Explore QueryPie's secrets to building successful teams through collaboration and shared values.
November 22, 2024
White Papers
Improving Personal Data Identification and Analysis with AI
Utilize QueryPie's AI to analyze personal data, ensuring better privacy management and regulatory compliance.
Blog
Cracking the Toughest Global Markets: What Makes QueryPie So Confident?
How QueryPie confidently tackles global market challenges with innovative solutions and strategic expertise.
November 22, 2024
Blog
Why QueryPie Stands Firm on Its Agentless Philosophy
Understand QueryPie's commitment to an agentless approach for streamlined and secure system management.
November 22, 2024
Stop Thinking.
Start Transforming.
