Features
BYOK vs Self-Hosted Models for Agentic Pentesting
Understand what bring-your-own-key controls and what still requires a private inference and data-handling design.
Oct 29, 2026 · 3 min read
FailSafe insights
Security research and insights
Incident reporting, security research, practical guides and product updates.
Recent articles
Features
Black-Box, Gray-Box, or White-Box Pentesting: Choose by Decision
Choose a penetration-testing access model by the uncertainty you need to resolve, available context, and required evidence.
Oct 29, 2026 · 3 min read
Features
AI Agent Approval Bypass: Bind Review to the Executed Action
Evaluate whether approval covers the exact tool, recipient, resource, and arguments that reach execution, including edits and retries.
Oct 29, 2026 · 3 min read
Features
Accepting a Pentest Finding: Build a Time-Bounded Exception Record
Document residual-risk acceptance with evidence, accountable approval, compensating controls, expiration, and reassessment triggers.
Oct 29, 2026 · 3 min read
Features
Private VPC vs On-Premise Pentesting: Ownership Before Location
Compare customer VPC and on-premise assessment designs by administration, inference, egress and evidence ownership.
Oct 29, 2026 · 3 min read
Features
A Safe Agentic Pentest POC: Success Criteria Before Access
Plan an agentic pentesting proof of concept with explicit authorization, representative workflows, safety controls, and useful evaluation evidence.
Oct 29, 2026 · 3 min read
Features
WebSocket security testing: authorize messages after the handshake
WebSocket security testing should evaluate the long-lived connection and each sensitive message or subscription. A successful authenticated handshake does not establish that a user
Oct 29, 2026 · 3 min read
Features
AI Code Review Agents: Separate Untrusted PR Content from CI Authority
Assess repository permissions, secrets, artifact handling, and review output for AI agents triggered by pull requests.
Oct 29, 2026 · 3 min read
Features
Authenticated cache testing: prevent one user's view becoming another's
Authenticated cache testing should determine whether cached content respects the same identity and tenant boundaries as its origin. A fast response is useful only when the cache de
Oct 29, 2026 · 3 min read
Features
FailSafe and Microsoft Security Copilot: Different Security Jobs
Understand where FailSafe offensive testing complements Microsoft Security Copilot investigation and security operations.
Oct 29, 2026 · 3 min read
Features
AI Agent Incident Containment: A Tabletop for Connected Tools
Rehearse pausing agent actions, revoking access, preserving evidence, and restoring a constrained workflow with synthetic incidents.
Oct 29, 2026 · 3 min read
Features
Authenticated pentest planning: build a useful role coverage matrix
An authenticated pentest coverage matrix should connect identities, resources, actions, and expected outcomes. A list of login credentials or a count of scanned pages cannot explai
Oct 29, 2026 · 3 min read
Features
RAG Permission Revocation: Verify Access After It Changes
Measure how revoked document and workspace access propagates through indexes, sessions, previews, and cached AI answers.
Oct 29, 2026 · 3 min read
Features
Pentest Exclusions: Document the Gaps Buyers Need to Understand
Make exclusions, prohibited actions, inaccessible features, and untested assets visible without confusing them with successful security checks.
Oct 29, 2026 · 3 min read
Features
Kubernetes tenant isolation: evaluate namespaces as part of a wider boundary
A Kubernetes tenant-isolation assessment should connect namespace organization to workload identity, network access, storage, and cluster permissions. A namespace label alone canno
Oct 29, 2026 · 3 min read
Questions & answers
Frequently asked questions
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.