Writing

Research and field notes

Deep dives, threat analysis, and notes from the work - mostly on AI and agent security, sometimes on whatever is breaking this week.

Latest

How to Evaluate Tools for Securing Production AI Agents

Give a vendor a support workflow and inspect what reaches the resource APIs. Test changed approvals, alternate paths, retries, and outages.

Read article