Practical Guide to Preventing and Testing Prompt Injection on Public Pages
Run a practical prompt injection testing program for public web pages: hands-on checks, detection heuristics, sanitization rules, CI tests, monitoring, and incident playbook.
AI security
Protect Your Code with a Secure AI Coding Assistant Checklist
Step-by-step checklist to protect source code when using AI coding assistants. Quick tests, workspace separation, vendor questions, and incident-response steps for teams.
AI Code Security Evaluation Checklist for Engineering Managers
A practical checklist for engineering managers to evaluate AI code tools: data handling, sandboxing, telemetry, training claims, logging, incident response and vendor questions.
Secure AI Data: Checklist for Teams Using ChatGPT, Gemini, Claude
Step-by-step checklist for teams to protect data when using ChatGPT, Gemini, or Claude: classification, prompt redaction, access control, contracts, retention, and incidents.