Blog
Field notes.
What we learn breaking AI products.
Process
Your first pentest: how to prepare
Test accounts, a signed scope and who to call when we find something.
Process
Grey box or black box?
What changes when we start with credentials, and when starting from zero is worth it.
Process
Reading a pentest report
What the severities mean. What to fix this week, and what can wait.