Red-Teaming & Evals
A reproducible lab for breaking agents — test harnesses, tooling (Garak, PyRIT, Promptfoo), security benchmarks and CTF-style challenges.
Offensive Red-Team Frameworks for AI Agents: Garak, PyRIT, and Promptfoo in the Lab
A hands-on offensive comparison of Garak, PyRIT, and Promptfoo for red-teaming AI agents in the lab: what attack techniques each tool automates, how they differ, and when to reach for which.
Read →AI Agent Security Benchmarks: Mapping Your Eval Harness to MITRE ATLAS and the OWASP Top 10 for Agentic Applications
How to map AI agent security benchmarks and your eval harness to MITRE ATLAS techniques and the OWASP Top 10 for Agentic Applications (ASI). A practical guide.
Read →CTF-Style Challenges for AI Agent Security: Building Reproducible Playgrounds and Scoring Agent Exploitation
How to design AI security CTF challenges that are reproducible, score real agent exploitation, and go beyond prompt injection puzzles to test tool-using agents.
Read →Testing Memory Poisoning in a Red-Team Lab: Seeding RAG Corpora and Detecting Tainted Retrieval
Build a memory poisoning test in your red-team lab: seed RAG corpora and vector stores with tainted records, then detect poisoned retrieval before it reaches the model.
Read →Red-Teaming Prompt Injection Against AI Agents: Payloads, Evasion, and TTPs in the Lab
A hands-on lab playbook for red-teaming prompt injection against AI agents: building jailbreak payloads, indirect injection testing, evasion patterns, and attacker TTPs.
Read →Tool-Call Fuzzing and Abuse Testing for AI Agents: Finding Excessive Agency and Confused-Deputy Paths
A red-team guide to tool call fuzzing and function call abuse testing for AI agents: how to surface excessive agency and confused-deputy paths before attackers do.
Read →