-
Research
From fuzzers to AI hackers: What seven years of application security research solved, and what remains unsolved
-
Research
Knowledge documents: When your application rejects everything an agent tries
-
Research
Instagram: Logic bugs and the infinite life of scraped data
-
Research
When APIs work too well: Lessons from Spotify’s large-scale scraping
-
Research
What the WhatsApp API Vulnerability Teaches Us About Rate Limiting and Information Disclosure
-
Research
OWASP Top 10 2025 vs 2021: What Has Changed?