
Field notes 001
How AI Is Changing Your Organization’s Security
From convincing impersonation to over-permissioned agents: six risks to understand, controls to test, and a 90-day plan to get started.
Read the articleSecurity insights / Articles
Practical perspectives on the systems you build, the technology you adopt, and the security decisions that follow.

Field notes 001
From convincing impersonation to over-permissioned agents: six risks to understand, controls to test, and a 90-day plan to get started.
Read the article
Web application security
A successful sign-in is the beginning of an identity review. Examine recovery, sessions, and permissions to understand what your login actually protects.
Read the article
Mobile application security
Follow sensitive information beyond the screen: local files, diagnostic logs, backups, and the transitions between signed-in users.
Read the article
Vulnerability research
Individual findings tell part of the story. Examine the conditions that connect them to understand which fixes can interrupt a larger path.
Read the article
Infrastructure security
Review who can act, what is reachable, and which activity you can investigate. A practical guide using AWS examples.
Read the article
AI security
When an assistant reads documents, messages, or websites, it encounters instructions you did not authorize. Test the boundaries between that content, your data, and its tools.
Read the articleGrounded in research
Our articles link to original guidance and explain how it applies to practical security decisions. Our research draws on sources including NIST, NCSC, FBI, OWASP, MITRE, AWS, Android Developers, Microsoft, and GitHub.
Stock photography illustrates the topics and does not depict a Redteam Cybersec engagement. Unsplash License.