#owasp

2026-10-15 Show HN: OWASP Finbot Defended with Tenuo 未评级 Tenuo is a task-scoped authz primitive for agentic work. We are an open protocol and an open source implementation at github.com/tenuo-ai/tenuo We created a fork of OWASP finbot with Tenuo wired in and red-teamed it with promptfoo. We went from 50 successful attacks to 0 with Tenuo. The promptfoo attacks were able to fool the model, but the deterministic guardrails Tenuo provides stopped it from acting on the poisoned instructions.

2026-10-01 Show HN: WattzGOAT – an intentionally vulnerable web app for security training 未评级 Built this as a hands-on lab for teaching web application security. It is a fictional electricity utility's customer portal with 48 deliberately planted flags (most of OWASP Top 10) you find and exploit CTF-style, including a simulated (rule-based, not a real model) AI assistant with its own prompt-injection-style vulnerabilities. Full disclosure, built this with AI assistance but I promise you're going to enjoy tinkering with it.

2026-08-29 WhiteHat Application Security Platform 未评级 copyright: — WhiteHat Scout (for Developers) combined with WhiteHat Sentinel Source (for Operations) supporting WhiteHat Top 40 and OWASP Top 10.