Foundations
Attack Surface
Everything an attacker could try to reach or influence: open ports, web pages, accounts, and installed software.
In more detail
Reducing attack surface means removing what you do not need: closing ports, deleting unused accounts, uninstalling software, narrowing permissions. For an AI agent the surface also includes everything it reads, since any text it ingests can carry instructions.