Blog Articles

2 November 20262 min. read

The Part of Crypto Security Nobody Talks About

Much of crypto runs on ordinary web software. Here are two vulnerabilities we found in the Solana Foundation's tokens.xyz, an account aliasing bug and same-origin XSS, and how they were fixed.

All Articles (31)

Sort by:

29 October 202613 min. read

API Security Testing Tools Compared: What Each One Checks

27 October 202611 min. read

IDOR Testing for APIs: How to Find Broken Object Access

26 October 20269 min. read

Manual Pentest vs AI Pentest: What Each Finds and Where Humans Win

21 October 20268 min. read

PHP2Shell CVE-2026-109618: What to Do Right Now

19 October 202613 min. read

Tenant Isolation Testing: How to Prove Tenant Boundaries Hold

18 October 202613 min. read

PR Security Review Tools Compared: Diff Checks Before Merge

14 October 202612 min. read

Verified Security Findings: How to Tell Proof From Inference

12 October 202611 min. read

What to Do With a Security Finding You Are Not Going to Fix

28 September 202611 min. read

Security Review for AI-Generated Code: What Changes Before Merge

25 September 202612 min. read

Offensive Security Testing in Production: What to Agree First

25 September 20262 min. read

From Pentests to Continuous Security with Pixels

24 September 202612 min. read

How to Prioritise Security Findings That Have No CVE

14 September 202611 min. read

AI Application Security Testing: The Authorisation Boundary

9 September 202611 min. read

Security Testing Every Release Without a Manual Bottleneck

8 September 20263 min. read

Two Years of Continuous Security with Banana Gun

7 September 202610 min. read

How Automatic Retests Verify a Fix When Your PR Merges

31 August 202612 min. read

How to Continuously Map Your External Attack Surface

28 August 202612 min. read

Autonomous Pentesting vs Vulnerability Scanning: What Each Finds

24 August 202610 min. read

SAST and Business Logic Vulnerabilities: What Static Analysis Can Reach

23 August 202611 min. read

Bug Bounty Alternatives: What AI Security Testing Replaces, and What It Doesn't

20 August 20265 min. read

Full Pentest vs PR Security Review: What Each One Actually Answers

18 August 202610 min. read

What Is Code-Aware Application Security Testing?

11 August 202611 min. read

How to Test Business Logic Vulnerabilities in a SaaS Application

6 August 20268 min. read

What Is Continuous Pentesting? A Definition for Engineering Teams

5 August 202610 min. read

XBOW Alternatives: Comparing Autonomous AI Pentesting Platforms

9 June 20265 min. read

Why we dropped "Security" from our name

8 June 20261 min. read

Your scanner didn't find it. Mjolnir did.

3 June 20261 min. read

What startups get wrong about Application Security

1 June 20261 min. read

How Borg pushes findings to Linear, Jira, and GitHub automatically

27 May 20261 min. read

Your Vulnerabilities exist right now. Odin finds them first.