Why Zero Data Retention Should Be Non-Negotiable When Your Team Uses LLMs
Zero data retention (ZDR) policies for LLMs in AppSec are not the default, but here's why they belong at the top of your AI procurement checklist.
What to Ask Every AI PenTest Vendor Before You Buy
These are the 8 questions that will tell you whether a vendor is selling a pen test alternative, a faster SAST tool, or a demo that doesn’t survive production
Vulnerabilities vs. Weaknesses: Why the Distinction Matters
There's a difference between insecure code patterns and true vulnerabilities that hackers seek to exploit. Why does that matter?
Working With DARPA to Secure Open Source Infrastructure: CVE-2026-31789
The story behind CVE-2026-31789 demonstrates how DARPA and Xint are accelerating AI cyber defenses
