The Regulatory Stack, Part 1: AISVS Has 14 Categories. GATE Has 16 Controls. Here Is the Map.
11 minutes
AISVS tells you what to verify. The AI Act tells you that you must. Neither tells you how to enforce. This is the engineering map between …
Tag
Security
OWASP Just Drew a New Map, Read It Before Your Auditors Do
9 minutes
The Foundation's new strategic plan is not a community update. It commits OWASP to setting the technical floor for AI security, …
The Mythos Ledger, Part 5: The Resilient Cloud Manifesto
11 minutes
The series finale. Across four posts, we identified three machine-speed problems - discovery, intelligence, identity - that share the same …
The Mythos Ledger, Part 4: Identity in the Autonomous Enterprise and Why the Agent Is the New Perimeter
13 minutes
Non-human identities now outnumber humans by 40:1, 100:1, and in hyper-automated environments by 500:1. When AI agents do 80–90% of an …
The Mythos Ledger, Part 3: The Glasswing Strategy (From Defensive Coalitions to Cloud Immunity)
11 minutes
Anthropic's $100M Project Glasswing is the first attempt to flip the economics of AI-driven vulnerability research before offensive …
The Mythos Ledger, Part 2: The Verification Crisis
19 minutes
AI-driven discovery has lowered the cost of finding bugs by an order of magnitude. The cost of proving which ones are actually exploitable …
The Mythos Ledger, Part 1: The Firefox Watershed and the New Baseline of Vulnerability
7 minutes
Claude Mythos surfaced 271 vulnerabilities in a single Firefox evaluation pass. The number isn't the story - the collapse in the cost of …
GATE: The Missing Infrastructure Layer for Agentic AI
6 minutes
Prompt guardrails are not governance. When AI agents can take real-world actions at machine speed, you need deterministic enforcement at the …
Engineering the Trustworthy Autonomous Enterprise
2 minutes
A detailed look at transitioning from supervised AI copilots to autonomous agentic systems and the 16 architectural primitives required for …
Security Advisory: Resilience in the Face of the LiteLLM Supply Chain Incident
3 minutes
Sakura Sky confirms zero impact from the LiteLLM supply chain hack (v1.82.7/8). Learn how our 'Zero-Value Target' architecture and Sentinel …
Sakura Sky Is Now a Vanta Partner
2 minutes
Sakura Sky is now a Vanta partner, helping GCP organisations streamline SOC 2, ISO 27001, and HIPAA with advisory support plus compliance …
Trustworthy AI Agents: The Trustworthy AI Blueprint
5 minutes
Bringing together all 16 primitives into a single, coherent architecture. The capstone: Operational Risk Modeling.