Free e-book: AI Security Pentest — how to test the security of AI applications
We've released a free technical guide on how to test the security of AI and LLM systems: prompt injection, RAG leakage, tool and agent abuse, jailbreaks,…
Blog · Pentest Machine
owasp-llm-top-10
Your AI agent has the database key. Who else does?
Agents with function calling and MCP turned the chatbot into a privileged user of your system. The five abuse patterns we find in agent pentests and…
Indirect prompt injection in RAG: how a PDF becomes an attack on your assistant
The most common vector we find in AI pentests doesn't come from the user — it comes from the documents your assistant reads. Here's the mechanism,…