Tagged:

2 posts

• The AI Security Tooling Landscape: Garak, PyRIT, Promptfoo, and the Open-Source Red-Team Ecosystem

  A practitioner's map of the open-source and commercial AI security tools landscape: what each tool does, which attack classes it tests, how to integrate it into a CI/CD pipeline or red team engagement, and which gaps no existing tool yet covers.

  Jul 13, 2026 red-teaming llm-security tools garak pyrit promptfoo devsecops vulnerability-scanning open-source

• When AI Finds Your Bugs, Should You Hide the Code?

  The UK's Government Digital Service published guidance that Terence Eden — who helped craft the NHS's original open-source policies — read as a pointed public rebuke of NHS England's decision to close nearly 200 open-source repositories in response to AI-assisted vulnerability discovery. What this dispute reveals about a wider security misunderstanding.

  Jun 20, 2026 open-source vulnerability-disclosure government ai-security supply-chain