Guides
Protect AI models, data, and systems
Test for behavioral risks in conversational AI
Mitigating risks and future trends
AppSec types, tools, and best practices
Automating dependency updates
Manage open source code
Keep source code safe
Improve transparency, security, and compliance
Pre-production scanning and runtime protection
Secure containerized applications
The Hallucinated Package Attack: Slopsquatting
Learn how AI-generated code can lead to fake package installs and attacks.
What is AI system prompt hardening?
Learn how to protect AI apps with secure prompt hardening techniques.
What Is a Prompt Injection Attack? Types, Examples & Defenses
Learn what prompt injection attacks are and how to defend against 4 key types.
What Is AI Penetration Testing and 5 Techniques
Explore AI penetration testing and five essential techniques.
AI Security Guide: Protecting models, data, and systems from emerging threats
Learn how to protect AI systems with practical strategies and security frameworks.
Shadow AI: Examples, Risks, and 8 Ways to Mitigate Them
Uncover the hidden risks of Shadow AI and learn 8 key strategies to address it.
The Growing Challenge of Shadow MCP: Unauthorized AI Connectivity in Your Codebase
MCP adoption is surging across industries, fundamentally reshaping how systems connect to AI models.
Why AI Red Teaming Is the Next Must-Have in Enterprise Security
Learn why red teaming is key to securing today’s enterprise AI systems.
Best AI Red Teaming Companies: Top 10 Providers in 2025
AI Red Teaming companies help software and security teams to better understand how their AI application behaves under adversarial attacks.
Top AI Red Teaming Solutions and How to Choose
Learn what AI red teaming solutions solve, how they work, and how to choose the right fit.
Vector and Embedding Weaknesses in AI Systems
Learn how to secure embeddings against poisoning, leakage, and inversion attacks.
AI Governance in AppSec: The More Things Change, The More They Stay the Same
Learn how AppSec teams can extend existing security and compliance practices seamlessly to AI.
Securing AI vs AI for security: What are we talking about?
This post breaks down the differences between securing AI, secure AI use, AI for security, and AI safety.
All About RAG: What It Is and How to Keep It Secure
Learn about retrieval-augmented generation, one complex AI system that developers are using.
Shining a Light on Shadow AI: What It Is and How to Find It
Find out more about shadow AI and the risks of leaving it uncovered.
Next-Gen Vulnerability Assessment: AWS Bedrock Claude in CVE Data Classification
Explore LLMs in cybersecurity research: analyzing vulnerability data, sifting through CVE information, and enhancing digital safety.
