Company news
We now test AI and LLM applications
A dedicated engagement for applications built on large language models — the interface, the retrieval pipeline, and the tools the model is permitted to call.
Read →News & insights
What we are seeing.
Research, analysis and advisories from the team. Claims are free and everyone makes them — this is the reasoning behind the work.
Analysis
The OWASP LLM Top 10 was rewritten for agents. Most testing has not caught up
The 2025 edition added system prompt leakage and vector and embedding weaknesses, and substantially expanded excessive agency. The shift is from what a model says to what it can be made to do.
Read →Research
Certificate services are now the shortest path to domain admin
Active Directory Certificate Services is deployed almost everywhere and reviewed almost nowhere. On internal engagements it is consistently the fastest route from a standard user account to full domain control.
Read →Guidance
DPDP: what the Act actually asks of you, in plain terms
Most DPDP guidance is written for lawyers. This is the engineering read — what has to change in your systems, and what only has to change on paper.
Read →