FEATURED / API SECURITY
Authorization is a system, not a checkbox
Why secure APIs require reasoning about users, objects, functions and state instead of checking authorization one endpoint at a time.
Loading No Breach
No Breach / RESEARCH
Practical security research, field notes and technical thinking across application security, AI systems and offensive testing.
01Research library
Browse No Breach writing by security topic or search across the published library.
FEATURED / API SECURITY
Why secure APIs require reasoning about users, objects, functions and state instead of checking authorization one endpoint at a time.
Why disciplined reconnaissance and system mapping often matter more than immediately searching for individual vulnerabilities.
A security model for understanding prompt injection when AI applications can retrieve data, invoke tools and perform actions.
Automation is valuable for coverage, but application behavior, authorization and business logic still require human reasoning.