application security

4 posts.

• 
  Building a DevSecOps Pipeline with GitHub Actions

  How my GitHub Actions security checks fit together, what their reports establish, and why enforcing a deployment gate and adopting GitOps remain separate steps.

• 
  The Evolution of Penetration TestingDay 9 of 100 · AI cybersecurity

  I used to spend most of my time testing web applications. My first look at AI pentesting products suggests the market is moving from point-in-time reports toward continuous, context-rich security testing.

• 
  Poisoning an AI assistant's memoryDay 4 / 100 · AI cybersecurity

  Lakera's MindfulChat challenge made persistent memory feel like a real application attack surface, not just a model prompt.

• 
  An interactive playground for LLM security testingDay 3 / 100 · AI cybersecurity

  I worked through an interactive OWASP LLM Top 10 playground and found a useful starting map, a few strong concepts, and several labs that needed more explanation.