Features
Sovereign Pentesting RFP: Questions Vendors Must Answer
Create an enterprise RFP covering inference, model choice, evidence custody, operations and a matched acceptance test.
Oct 29, 2026 · 3 min read
FailSafe insights
Security research and insights
Incident reporting, security research, practical guides and product updates.
Recent articles
Features
MCP Tool Schema Changes: Keep Approval Aligned with Behavior
Design a review and test process for changed MCP tool descriptions, schemas, and risk annotations without treating metadata as enforcement.
Oct 29, 2026 · 3 min read
Case Studies
FailSafe Supports NEAR AI in Securing IronClaw Agents
FailSafe SWARM partnered with NEAR AI to uncover and patch a critical safety layer bypass and memory poisoning vulnerabilities in their Rust-based IronClaw framework.
Apr 15, 2026 · 3 min read
Case Studies
FailSafe Secures NVIDIA's NemoClaw Agents
A proactive security assessment of NVIDIA NemoClaw (alpha) uncovered multiple vulnerabilities, including a path traversal exploit that escaped the agent sandbox container.
Apr 13, 2026 · 4 min read
Features
Multi-Agent Delegation: Test Whether Scope Survives the Handoff
Review identity, delegated permissions, task boundaries, and revocation when one AI agent assigns work to another.
Oct 29, 2026 · 3 min read
Features
FailSafe vs XBOW: Application Proof, AI Scope and Deployment
Choose FailSafe for attack-led application and AI testing, sovereign inference, security-trained cyber models and a connected remediation workflow.
Oct 29, 2026 · 3 min read
Case Studies
Uniocean: Smart Contract Audits, V1 and V2
FailSafe audited Uniocean's prediction protocol twice: the V1 launch contracts in April 2026 and the V2 upgrade in September 2026, covering both its Pyth and Uniocean oracle varian
Apr 10, 2026 · 4 min read
Research
A CISO's Guide to Mythos: The Era of Infinite Offensive Capacity
Anthropic’s Claude Mythos Preview proved AI is ready for offensive security. As AI-assisted attacks scale and overwhelm platforms like HackerOne, CISOs must harness agentic AI for
Apr 10, 2026 · 4 min read
Features
On-Premise vs Cloud Agentic Pentesting: Choose the Data Boundary
Compare on-premise and cloud agentic pentesting by inference, evidence, operations and the sensitivity of the workload.
Oct 29, 2026 · 3 min read
Features
AI Red Teaming and Agentic Pentesting: Follow the Business Impact
Distinguish model behavior testing from application and agentic penetration testing, with concrete evidence and remediation checks.
Apr 9, 2026 · 3 min read
Features
Pentest Remediation Ownership: From Finding to Verified Work
Assign technical findings to teams with a clear evidence handoff, treatment decision, verification objective, and review date.
Oct 29, 2026 · 3 min read
Hacks & Incidents
CVSS 10.0 RCE in Flowise AI Builder: Why Your AI Agents Are The Ultimate Attack Vector
The rush to deploy autonomous AI agents has created a massive, unmanaged attack surface. Today’s critical CVSS 10.0 RCE vulnerability in Flowise proves why traditional security tes
Apr 7, 2026 · 4 min read
Research
Self-Tuned Cyber Models vs General LLMs for Pentesting
Evaluate specialist cyber post-training against general models using the same security tasks, tools and success criteria.
Oct 29, 2026 · 3 min read
Research
FailSafe SWARM: The Architecture of Autonomous Agentic Penetration Testing
Driven by AI coding assistants and autonomous development pipelines, enterprises are deploying code faster than human security teams can audit it. FailSafe answers this asymmetric
Apr 5, 2026 · 8 min read
Features
Continuous Pentesting Cadence: Decide What Triggers Another Test
Design an agentic testing cadence around system changes, meaningful risk, access readiness, and remediation capacity.
Oct 29, 2026 · 3 min read
Questions & answers
Frequently asked questions
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.