A staged approach to rolling out AI services securely
Internal, partially exposed, customer-exposed: why AI risk changes with exposure, and the controls and tests each stage needs before you widen access.
Field notes on offensive security.
Research, engineering notes and lessons from testing apps, pipelines and AI services.
Hunting secrets in CI/CD pipelines: what we look for
Build logs, cached layers, forgotten workflows. Where credentials really leak in delivery pipelines, and how to close each gap for good.
Why manual pentesting doesn't scale with your release cycle
Annual pentests were built for annual releases. Teams that ship weekly need testing that keeps pace, with experts kept in the loop.