Blog

Notes from the field.

Research, product updates, and lessons from building AI-native security tooling and running it against real environments.

A forensic case study in session-token replay and multi-month vendor fraud — how a stolen session persisted undetected for over three months.

Anatomy of the Claude Code source map leak and the Axios supply chain attack — root causes, blast radius, and prescriptive release-pipeline controls.

Want it in your inbox?

Reach out and we'll let you know when new research lands.