Blog
Field Notes from Authorized Security Engagements
Practical observations from our work — methodology, findings patterns, and how we think about risk.
- CASE STUDIES
SaaS Penetration Testing Case Study: Preventing Cross-Tenant Data Exposure
How a manual SaaS penetration test uncovered cross-tenant object access, invitation-based privilege escalation, and excessive API data exposure before enterprise launch.
14 min read - AI/LLM SECURITY
The Support Ticket That Became a Command: An Indirect Prompt Injection Case Study
A controlled case study showing how untrusted support-ticket content can redirect an AI agent, misuse connected tools, and expose gaps in forensic evidence.
13 min read - PROCESS
Rules of Engagement That Actually Work
What to include in a Rules of Engagement document so testing stays narrow, safe, and useful.
7 min read - API SECURITY
API Authorization Bugs Still Dominate Our Findings
Why broken object level authorization keeps topping our reports — and the patterns we recommend.
9 min read - CLOUD
Cloud Misconfiguration vs. Vulnerability: A Practical Distinction
How we triage cloud findings so teams can prioritize the issues that genuinely move risk.
6 min read - INCIDENT RESPONSE
The First Hour of an Incident
Containment, preservation, and communication discipline in the first sixty minutes of a suspected breach.
8 min read