Blog
Notes from the work.
Practical writing on AI security, application security, and secure delivery — translating real testing and engineering work into something teams can use. New pieces are on the way.
Planned articles
01
API pentesters already have an AI-security advantage
AI Security
Coming soon
02
Prompt injection is an engineering problem, not a prompt problem
AI Security
Coming soon
03
What OWASP LLM Top 10 means for product teams
AppSec
Coming soon
04
Adding AI red teaming to CI/CD
DevSecOps
Coming soon
05
Threat modeling AI features before they reach production
Threat Modeling
Coming soon
Where I publish
Follow the work as it happens.
LinkedIn posts
Short, regular notes on AI security, AppSec, and secure delivery.
GitHub write-ups
Repos, lab code, and longer technical write-ups behind the lab work.
YouTube walkthroughs
Recorded walkthroughs of tooling, testing, and secure delivery practices.
Security notes
Distilled lab notes and reference material for engineers and product teams.
Want a topic covered?
If there's an AI-security or secure-delivery question you keep running into, tell me — it might become the next piece.