ResearchResearch
Four surfaces, fragmented security ownership
Organizations assign security ownership by technology. Attackers organize around reachable trust.
· 3 min read
Research
Research
Technical research from the RedMaw team on exploitation technique, access abuse and AI system security.
ResearchResearch
The validation gap
Security teams often have abundant detection data and much less evidence about what an attacker can actually use.
· 4 min read
ResearchResearch
The AI release security gap
AI release processes often have a mature answer for functional regression and a less defined answer for adversarial security regression.
· 4 min read
ResearchResearch
The remediation truth gap
The farther closure moves from adversarial retesting, the more assumption remains in the remediation state.
· 4 min read
ResearchAI Security
Indirect injection in retrieval pipelines
Retrieval is a trust boundary. In most implementations it is not treated as one.
· 9 min read
ResearchSaaS & Identity
Non-human identity paths across SaaS tenants
Machine identities accumulate access faster than they lose it, and they cross tenants where humans do not.
· 8 min read
Stop assuming you are secure. Prove it.
Continuously test what an attacker can actually reach across your applications, SaaS identities, internal infrastructure and AI systems.