215 active tools across 12 security categories
Commercial SAST, SCA, CNAPP matchups
Free and OSS tool comparisons
34 round-ups
Fundamentals, guides & deep-dives · 70 articles
New to AppSec?
Long-form deep-dives
OWASP LLM01. Direct, indirect, and jailbreak injection patterns, plus the guardrails that block them.
First-party studies with raw data · 13 reports
Original deep-dive research
Industry data, updated yearly
25.1% of AI-generated code had confirmed vulnerabilities. 6 LLMs tested with 5 SAST tools.
All studies include raw data, scripts, and reproducible methodology. No vendor funding.
Hard at work
Location: Helsinki, Finland
I typically respond within 24-48 hours.
