Field notes on AI-era application security
What changed this month in how apps get taken apart, and what it means for the app you ship. Every claim links to its source.
Follow by RSS: /blog/feed.xml
4 min readREA after the hype: what AI reverse engineering can and can't take from your appREA passed 360,000 GitHub stars in October 2026. What it actually does, what developers found running it on their own apps, and what to change in yours.AI reverse engineeringREAApp hardening
- 3 min readYour frontend is leaking: source maps and API keys in shipped codeApple's App Store website and Claude Code both shipped source maps. Researchers keep finding live keys in bundles. How to check your own app in an afternoon.Source mapsSecretsWeb security
- 4 min readRepackaged apps in 2026: why a passing integrity check isn't proofA new trojan swaps real banking apps for patched copies and relays Play Integrity. What 2026's mobile threats mean for app teams, including India's new RBI app rules.Mobile securityAndroidIndia
- 4 min readAI now finds vulnerabilities at volume. What changes for your patch cycleAI labs, Google, VulnCheck, five national agencies and CERT-In all weighed in this year. The honest read: discovery has sped up, mass exploitation hasn't followed yet.AI securityPenetration testingVulnerability management
- 4 min read2026's biggest crypto losses weren't smart contract bugs. Audit anywaySigners, RPC nodes, credentials and price manipulation drove 2026's largest losses, while code bugs were the most frequent. What that means for a smart contract audit's scope.Smart contractsWeb3Audits
- 4 min readOWASP Top 10:2025 puts supply chain at A03. A year of npm worms shows whyThe 2025 OWASP Top 10 moves software supply chain failures to third place. Twelve months of npm and PyPI compromises explain the change, and what to check in your build.OWASPSupply chainWeb security
Topics we cover
- AI reverse engineering
- REA
- App hardening
- Source maps
- Secrets
- Web security
- Mobile security
- Android
- India
- AI security
- Penetration testing
- Vulnerability management
Next step
Find out what your app gives away. Book a free exposure call.
Thirty minutes with an engineer, not a sales deck. Tell us what you ship; we tell you what we'd look at first and what an audit would involve.
We only test applications you own or are explicitly authorized to test.