Features
A successful key ceremony should end with verified artifacts
PKI assurance for enterprise buyers: connect key-generation procedures, resulting certificates, trust changes and operational evidence.
Nov 2, 2026 · 3 min read
FailSafe insights
Security research and insights
Incident reporting, security research, practical guides and product updates.
Recent articles
Product
Changing the cyber model? Keep the assessment evidence comparable
Evaluate a FailSafe cyber-model or deployment change with a stable authorized case set, clear safety criteria and recorded inference boundaries.
Nov 2, 2026 · 3 min read
Features
FailSafe vs Upwind Red Agent: compare the evidence and deployment boundary
Compare FailSafe SWARM with Upwind’s published Red Agent proposition using workload scope, reproducibility, remediation and sovereign inference requirements.
Nov 2, 2026 · 2 min read
Features
Turn an AI-cyber action plan into evidence your risk committee can review
A financial-services guide to mapping AI-cyber commitments to accountable owners, observed controls and verified remediation progress.
Nov 2, 2026 · 3 min read
Product
Your first agentic pentest: choose a target that can teach your team something useful
Use business impact, scope readiness and remediation ownership to select a first FailSafe SWARM black-box pentest target.
Nov 2, 2026 · 3 min read
Research
Before buying an “independent” AI assessment, ask what the assessor could see
Use access, evidence provenance, declared restrictions and review independence to evaluate an enterprise AI security assessment.
Nov 2, 2026 · 3 min read
Hacks & Incidents
LangGraph CVE-2026-118668: test the Store authorization result
LangGraph’s custom-authentication advisory shows why agent memory isolation must be checked across runtime boundaries, not only in handler code.
Nov 2, 2026 · 3 min read
Research
Test an agent’s stop controls after it has already started working
Long-running agent assurance should evaluate revocation, external stop controls and retained task state at several points in an authorized workflow.
Nov 2, 2026 · 3 min read
Hacks & Incidents
MCP Python SDK token validation: a patched package still needs the right setting
CVE-2026-116684 response: review MCP bearer-token audience validation, fixed SDK versions and the configuration evidence needed after an upgrade.
Nov 2, 2026 · 2 min read
Features
Microsoft Agent 365 and Perception: turn the control inventory into a test plan
Use Microsoft’s agent-control architecture to define practical tests of identity, delegated authority and policy changes, with FailSafe attack-path evidence.
Nov 2, 2026 · 3 min read
Features
Before connecting a security-agent marketplace, review the authority it receives
Tenable OPEN for AI highlights a wider buyer question: how should enterprises approve permissions, workflow outputs and revocation for security-agent integrations?
Nov 2, 2026 · 3 min read
Features
AI Passport and agent delegation: what a signed credential still needs to prove
Assess scoped delegation, revocation and action evidence around ServiceNow AI Passport and enterprise agent-authority systems.
Nov 2, 2026 · 3 min read
Features
Your SOC agent can take action. Test whether the action contains the right incident
A buyer guide to validating automated SOC response with synthetic incidents, bounded actions, rollback ownership and verified access reduction.
Nov 2, 2026 · 3 min read
Product
Own your inferencing: keep sensitive pentest workloads under enterprise control
FailSafe sovereign inference planning: define local processing, failure behavior, support access and evidence retention for sensitive pentesting workloads.
Nov 2, 2026 · 3 min read
Product
One finding, several owners: how SWARM evidence can support the handoff
Connect reproduced FailSafe findings to security triage, ITSM, engineering review and remediation retesting without losing the original attack context.
Nov 2, 2026 · 3 min read
Questions & answers
Frequently asked questions
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.