FailSafe insights
Incident reporting, security research, practical guides and product updates.
Recent articles
Features
A CSRF assessment should evaluate whether a browser can cause an unintended authenticated state change from an untrusted origin. The useful result concerns a specific action and cr
Oct 29, 2026 · 3 min read
Features
Check cross-tenant retrieval, previews, caches, and generated answers with a synthetic two-tenant assessment plan.
Oct 29, 2026 · 3 min read
Features
A legacy API assessment should determine whether older supported or forgotten interfaces apply the intended current security rules. Removing a route from documentation does not est
Oct 29, 2026 · 3 min read
Features
An Azure RBAC assessment should distinguish authority to manage a cloud resource from authority to access the data it serves. The relevant boundary depends on the service, role def
Oct 29, 2026 · 3 min read
Features
A security audit log assessment should determine whether important application actions can be reconstructed without exposing credentials or unnecessary personal data. The existence
Oct 29, 2026 · 3 min read
News & Alerts
Citadelle Defence & Security Consultancy and FailSafe announce a strategic partnership to deliver Digital Security & Resilience Services.
Jun 29, 2026 · 4 min read
Features
Build a practical cost comparison for local models, hosted inference and the people operating a security assessment.
Oct 29, 2026 · 3 min read
Case Studies
FailSafe conducted a comprehensive full-stack security audit for MakeBanc, hardening their smart contracts and off-chain backend orchestration services.
Jun 26, 2026 · 4 min read
Features
Evaluate offline assessment requirements across model serving, tools, updates, licensing, reporting and support.
Oct 29, 2026 · 3 min read
Features
Create a small versioned security corpus for model, prompt, policy, and connector changes with measurable boundaries and bounded attempts.
Oct 29, 2026 · 3 min read
Features
Compare FailSafe and Cobalt on assessment cadence, application proof, AI workflows and source-aware remediation.
Oct 29, 2026 · 3 min read
Features
Prepare an API penetration-testing scope that captures versions, authorization roles, stateful workflows, third parties, and safe test data.
Oct 29, 2026 · 3 min read
Features
Separate regional storage from inference, jurisdiction, support access and operational control in a security assessment.
Oct 29, 2026 · 3 min read
Features
Test whether an MCP server rejects tokens intended for another service, using synthetic identities and evidence from the authorization boundary.
Oct 29, 2026 · 3 min read
Features
Normalize penetration-testing prices by target coverage, access, methods, reporting, retesting, and customer work instead of headline fees.
Oct 29, 2026 · 3 min read
Questions & answers
How to navigate FailSafe's security research, analysis, and updates.
The FailSafe blog covers security research, exploit analysis, case studies, product updates, company news, and practical guidance for protecting critical systems.
Use the category filters on this page to browse research, features, case studies, hacks, FailSafe news, and product articles.
Yes. The research section includes analysis and findings produced by FailSafe's security team, alongside technical case studies and commentary on emerging threats.
Responsible disclosures and public upstream security contributions are listed in the FailSafe Disclosure Program at getfailsafe.com/disclosures.