When agents share business information, your team needs to know who can join the work and which records they can see.
Louck, Stulman and Dvir’s November 2025 study examined Coral, ACP and A2A. The researchers tested Coral’s implementation and an ACP simulation, and assessed A2A through published material.
Check access as well as communication
The researchers reported strengths in Coral’s message validation and separation between sessions. They also found authentication, participant-validation and rate-limiting gaps in the implementation they tested.
Ask your delivery team how they verify agent identity, restrict access and test the deployed system.
Review the version you plan to run
The findings describe the 2025 study, rather than an assessment of today’s release. Use the original paper for its findings and methods, and the current security documentation when planning deployment.