Insights
Product, design, AI, and engineering perspectives from our team.
30 Oct 2026
Responsible Disclosure & Bug Bounties for AI SaaS
AI features introduce attack surface — prompt injection, data exfiltration via retrieval, system prompt leakage — that most existing disclosure policies and bug bounty scopes don't cover. Here's how to close that gap.
6 min readChris Kerr
Governance & privacy28 July 2026
AI Security Review: Threat Modelling LLM Apps Before Launch
A practical, pre-launch framework for threat modelling LLM applications — prompt injection, tool-use data exfiltration, RAG poisoning, and tenant isolation — mapped to OWASP's LLM Top 10 and Australian privacy obligations.
9 min readChris Kerr
Governance & privacy1 May 2026
AI Security: Protecting Your Models, Data, and Users
Production AI systems face unique security challenges from prompt injection to model theft. Learn how to protect your AI models, data, and users with practical security measures designed for Australian organisations.
6 min readTom O'Brien