Web Application SecurityLatest
Beyond the Login
A visual guide to identity, authorization and tenant boundaries.
Research & insights
Practical security research. Real assessment lessons. Clear takeaways.
Latest articles6 articles
Web Application Security
From Input to Attack Chain
How input crosses trust boundaries—and how to reason about impact.
AI Security
We Tested the AI. The Bigger Risk Was Everything It Could Reach.
Lessons from assessing the systems and tools connected to enterprise AI.
API Security
When “By Design” Becomes a Breach
When intended API features combine with excessive privilege.
Web Application Security
Unauthenticated RCE in an Enterprise FP&A Platform
An enterprise case study in access-control and workflow failures.
SAP Security
How a Basic Login Took Over an SAP System
What an authorized assessment revealed beyond the SAP login.