Tagged:

2 posts

• The AI Security Tooling Landscape: Garak, PyRIT, Promptfoo, and the Open-Source Red-Team Ecosystem

  A practitioner's map of the open-source and commercial AI security tools landscape: what each tool does, which attack classes it tests, how to integrate it into a CI/CD pipeline or red team engagement, and which gaps no existing tool yet covers.

  Jul 13, 2026 red-teaming llm-security tools garak pyrit promptfoo devsecops vulnerability-scanning open-source

• When AI Writes the Bug: Security Vulnerabilities in LLM-Generated Code

  Peer-reviewed studies confirm that AI code assistants produce insecure code at high rates — and that developers using them write less secure code on average. Here's which CWE classes recur, why they recur, and what effective review looks like.

  Jul 9, 2026 llm-generated-code code-security cwe code-review ai-code-assistants sast devsecops