Latest article
How pentest firms add a defined AI assessment scope to an existing client engagement: a coverage matrix, test boundary, responsibilities, evidence handoff, and a one-page scope addition.
Read Article →
How pentest firms add a defined AI assessment scope to an existing client engagement: a coverage matrix, test boundary, responsibilities, evidence handoff, and a one-page scope addition.
Read Article →
How European pentest firms can add AI security assessments: when to build, refer or deliver jointly, and what each route leaves you responsible for.
Read Article →
A triage method for CISOs: choose which AI system to test first using exposure, business consequences, and evidence gaps.
Read Article →
How seven review gates turn failed AI red team tests into validated findings with defensible severity, remediation, retest criteria, and scope limits.
Read Article →
MCP security testing should trace untrusted input through tool selection, permissions, approval and memory to the external business effect it can cause.
Read Article →
What your team must define, document, provision, and authorise before an independent assessor can test one AI system and produce findings you can defend.
Read Article →
The EU AI Act names no CISO anywhere. Here's the AI cybersecurity assurance workstream security should own, and the evidence to require for everything else.
Read Article →
The EU AI Act high-risk deadline moved to 2027 and 2028. The evidence work did not. Here is what to prove for one AI system before your next review.
Read Article →
Most AI systems can show they work. Production review asks for evidence: failure modes, testing, controls, ownership, monitoring, and EU AI Act readiness.
Read Article →
EU AI Act compliance for high-risk systems turns on classification, evidence, and timing. What applies, when, and what compliance leads must document.
Read Article →
Test LLMs against EU AI Act requirements with Promptfoo, including Article 5 risks, red-team reports, and remediation steps.
Read Article →
What an independent adversarial assessment covers, the evidence it produces, and how findings become remediation and documentation auditors can use.
Read Article →
Learn what AI red teaming and adversarial testing mean, how they differ from standard security testing, and when organizations need them.
Read Article →No articles match this filter yet.
Book a short scoping call and we'll help you define what to assess, what access is needed, and what evidence would be most useful for your AI security, governance, and compliance teams.