Skip to content
ZK
ZAIN KHALIL KHAN
PORTFOLIO
All articles

Field journal

How I Built AI Agents for Cybersecurity and Financial Analysis

What I learned from building a shared agent framework across two domains with different data, models, and risk boundaries.

August 15, 20264 min
ProjectsAI AgentsPythonScikit-learnData Visualization

Why combine two domains?

Cybersecurity and financial analysis look different, but both depend on finding meaningful behavior in noisy, changing data. I built a suite of AI-driven agents to explore the shared engineering patterns: ingesting live API data, creating features, applying predictive or anomaly models, and presenting results through dashboards. The domain logic stays separate, but the workflow can reuse a common foundation.

A shared agent pipeline

Each agent follows a clear path from data collection to validation, feature preparation, model execution, and explanation. Python and scikit-learn support the analytical layer, while live feeds keep the dashboards current. I separated tools and data permissions by agent so a cybersecurity task would not accidentally inherit a financial action or unrelated context.

Making model output understandable

A prediction without supporting signals is difficult to use. The dashboards expose trends, contributing features, confidence, and recent data quality. In security, that may mean showing the events behind an anomaly. In finance, it means distinguishing model output from factual market data and avoiding language that sounds like guaranteed advice. Human review remains part of both workflows.

The lesson from building a suite

The most reusable part of an agent is not the prompt. It is the surrounding engineering: schemas, tool contracts, evaluation, observability, and failure handling. This project helped me see agents as software systems rather than personalities. The more consequential the domain, the more important it becomes to narrow authority and show the user exactly how a result was produced.