Compare external attack surface management and vulnerability scanning, including discovery, validation, ownership, continuous monitoring and penetration testing.
Compare authenticated and unauthenticated vulnerability scanning, understand coverage and credential risks, and learn how to combine both approaches.
Compare IAST, SAST and DAST by coverage, evidence, limitations and SDLC fit, then learn how to combine them with penetration testing.
A hands-on methodology for finding broken object-level authorization and IDOR vulnerabilities in REST and GraphQL APIs, including bulk and nested access.
Test API authentication and authorization across tokens, sessions, roles, objects, functions and service identities with this practical methodology.
Secure the AI model supply chain across model hubs, datasets, weights, code, containers, providers and deployment with this practical testing guide.
A practical methodology for testing vector databases, embedding pipelines and RAG systems for tenant isolation, injection, leakage, poisoning and access-control flaws.
Learn how to build and validate an AI Bill of Materials covering models, datasets, prompts, agents, tools, dependencies, licences, provenance and security risk.
Build an AI agent incident-response playbook covering detection, containment, identity revocation, evidence, recovery and post-incident regression testing.
Test LLM applications for sensitive-data leakage across prompts, RAG, memory, APIs, logs and tools with practical scenarios, controls and evidence.
Test whether AI agents can bypass, manipulate or replay human approval gates for sensitive tools, transactions and enterprise workflows.
A practical guide to testing MCP OAuth and authorization, including token audience, consent, client registration, tool permissions, replay and confused-deputy risks.
