trenchcoat
Free · no sign-up
Website report · 19 Oct 2026

blogs.microsoft.com

“Securing the agentic insider - The Official Microsoft Blog”

Template-written 25 evidence items Code reader analysed 4 scripts
What this means for you

The Official Microsoft Blog talked to 5 outside services on a first visit.E6E12E11E7

  • Tech check: the site mentions ai / agents, live data / analytics and a working app / platform, but we found nothing behind those in what its public page loads.E22E23E24
  • What loads is a page only: no calls to its own backend, no wallet code, no contract calls, no AI services and no live connections.E25
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code still includes Google Tag Manager and Meta Pixel, which may switch on later (for example after you accept cookies or sign in).E17E18
  • 2 cookies were set in your browser, all by the site itself.E13E14

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Nothing found on the public page

AI / agents

“Skip to content Securing the agentic insider Oct 19, 2026 | Hayete Gallot - Executive Vice…”E22

No matching code, calls or services in what loaded for us.

Nothing found on the public page

Live data / analytics

“…gents must become continuous. We need to understand in real time what the agents are doing and what risks those actions…”E23

No matching code, calls or services in what loaded for us.

Nothing found on the public page

A working app / platform

“…ft Security Dynamics 365 Microsoft 365 Microsoft Power Platform Microsoft Teams Microsoft Copilot Small Business Azure…”E24

No matching code, calls or services in what loaded for us.

Calls its own backend none seen
Wallet code none seen
Contract calls in its code none seen
Talks to AI services none seen
Live connections none seen

What loads is a page only: no own backend calls, wallet code, contract calls, AI services or live connections.E25

What it is

  • The site describes itself as: “In the last few months, concerns have arisen about AI safety as a growing number of incidents were publicly disclosed. These incidents expos”E2
  • It's built with jQuery (common tools for building web apps).E16
  • In your browser it runs work in a background thread and draws graphics on a canvas.E19E20
  • It has sections such as /blog, /on-the-issues and /wp-content.E21

Where your data goes

CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
unpkg.comunpkg: open-source file CDN 1×E6
Not identifiedServices we don't have in our list yet. 4
c.s-microsoft.comnot identified 4×E12
assets.onestore.msnot identified 1×E11
js.monitor.azure.comnot identified 1×E7
msblogs.thesourcemediaassets.comnot identified 1×E10

Our sandbox blocked requests to assets.onestore.ms because they pointed to private or internal addresses.

How key features work

Drawing and editing in the browser

The page draws and edits graphics in your browser using the canvas.E20

canvas

Measuring what you do

Visits and clicks are measured with Google Tag Manager and Meta Pixel (found in its traffic or its code).E17E18

Google Tag ManagerMeta Pixel

Saving data on your device

It saves data in your browser (sessionStorage), so some things persist between visits.E15

sessionStorage

Cookies and storage

Names only. We never store the values.

CookieSet forKeptWhose
__cf_bmE13blogs.microsoft.com about 0 daysthe site
_cfuvidE14blogs.microsoft.com until you close the browserthe site

sessionStorageE15: wpEmojiSettingsSupports

Pages and API calls

Pages it links to

/blog//on-the-issues/wp-content

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Securing the agentic insider - The Official Microsoft Blog
page title · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/
E2
Page description: In the last few months, concerns have arisen about AI safety as a growing number of incidents were publicly disclosed. These incidents exposed how pow
page description · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/
E3
Site name: The Official Microsoft Blog
page site_name · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/
E4
Main heading: Securing the agentic insider
page h1 · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/
E5
22 request(s) to blogs.microsoft.com
types: 12 script, 7 stylesheet, 2 image
GET https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/ · script · 22 requests · network recording
E6
1 request(s) to unpkg.com
types: 1 script
GET https://unpkg.com/yett@0.2.3/dist/yett.min.js · script · network recording
E7
1 request(s) to js.monitor.azure.com
types: 1 script
GET https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js · script · network recording
E8
3 request(s) to uhf.microsoft.com
types: 1 stylesheet, 1 script, 1 image
GET https://uhf.microsoft.com/statics/20261015.09.43/css/style-PF2pqjN1.css · stylesheet · 3 requests · network recording
E9
1 request(s) to wcpstatic.microsoft.com
types: 1 script
GET https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js · script · network recording
E10
1 request(s) to msblogs.thesourcemediaassets.com
types: 1 image
GET https://msblogs.thesourcemediaassets.com/2026/10/Slide3-002.jpg · image · network recording
E11
1 request(s) to assets.onestore.ms
types: 1 script
GET https://assets.onestore.ms/cdnfiles/external/mwf/short/v1/latest/scripts/mwf-auto-init-main.var.min.js · script · network recording
E12
4 request(s) to c.s-microsoft.com
types: 4 font
GET https://c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2 · font · 4 requests · network recording
E13
Cookie '__cf_bm' set for blogs.microsoft.com
kept for about 0 days
cookie __cf_bm on blogs.microsoft.com · value not stored
E14
Cookie '_cfuvid' set for blogs.microsoft.com
session cookie
cookie _cfuvid on blogs.microsoft.com · value not stored
E15
sessionStorage: 1 key(s) saved in your browser
sessionStorage keys: wpEmojiSettingsSupports · values not stored
E16
jQuery found in the code
blogs.microsoft.com/wp-includes/js/jquery/jquery-migrate.min.js @ 2:3045 · “jQuery.fn.” · pattern scan
E17
Google Tag Manager found in the code
blogs.microsoft.com/ (page HTML) @ 116:9 · “dataLayer.push” · pattern scan
E18
Meta Pixel found in the code
blogs.microsoft.com/ (page HTML) @ 621:10 · “connect.facebook.net/en_US/fbevents” · pattern scan
E19
Uses the browser ability: web_worker
runs work in a background thread
blogs.microsoft.com/ (page HTML) @ 652:2377 · “new Worker(” · pattern scan
E20
Uses the browser ability: canvas
draws graphics on a canvas
blogs.microsoft.com/ (page HTML) @ 652:1525 · “getContext("2d"” · pattern scan
E21
10 links to pages on the same site
page links · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/ · /blog, /, /on-the-issues, /wp-content
E22
The site says: “Skip to content Securing the agentic insider Oct 19, 2026 | Hayete Gallot - Executive Vice…”
page text · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/ · Skip to content Securing the agentic insider Oct 19, 2026 | Hayete Gallot - Executive Vice…
E23
The site says: “…gents must become continuous. We need to understand in real time what the agents are doing and what risks those actions…”
page text · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/ · …gents must become continuous. We need to understand in real time what the agents are doing and what risks those actions…
E24
The site says: “…ft Security Dynamics 365 Microsoft 365 Microsoft Power Platform Microsoft Teams Microsoft Copilot Small Business Azure…”
page text · https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/ · …ft Security Dynamics 365 Microsoft 365 Microsoft Power Platform Microsoft Teams Microsoft Copilot Small Business Azure…
E25
34 requests on load: no own backend calls, wallet code, contract calls, AI services or live connections
GET https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/ · summary · 34 requests · network recording

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • The code reader hit its size budget on parts of 3 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 9Up1WdnE.