Security Research
In-depth studies on vulnerabilities and defenses in copilot and no-code applications
Security ResearchAppendix: Interpreting Jailbreaks and Prompt Injections with Attribution Graphs
Max Fomin
Security ResearchBreaking down AgentKit's Guardrails
A deep dive into OpenAI's AgentKit guardrails, how they are implemented, and where they fail
Stav Cohen
Security ResearchAnalyzing The Security Risks of OpenAI's AgentKit
Stav CohenandRaul Klugman-Onitza
Security ResearchPrompt Mines: 0-Click Data Corruption In Salesforce Einstein
Tamir Ishay Sharbat
Security ResearchAgentFlayer: Minimum Clicks, Maximum Leaks: Tilling ChatGPT’s Attack Surface
Exploiting ChatGPT with Language Alone: A Deep Dive into 0Click and 1Click Attacks.
Dmitry Lozovoy- Security Research
AgentFlayer: ChatGPT Connectors 0click Attack
Tamir Ishay Sharbat 
Security ResearchAgentFlayer: When a Jira Ticket Can Steal Your Secrets
TL;DR: A 0click attack through a malicious Jira ticket can cause Cursor to exfiltrate secrets from the repository or local file system.
Marina Simakov
Security ResearchAgentFlayer: When AIjacking Leads to Full Data Exfiltration in Copilot Studio
Tamir Ishay Sharbat
Security ResearchEchoLeak: A Reminder That AI Agent Risks Are Here to Stay
Marina Simakov- Security Research
AgentFlayer: Discovery Phase of AI Agents in Copilot Studio
Tamir Ishay Sharbat 
Security ResearchAI Agents & 0-Click Exploits: The New Battle Ground for AI Security
Tamir Ishay Sharbat
TalksZenity Research Published at RSAC 2025
Copilots and agents are a new access vector; How to build an AppSec program that scales to the level of citizen development
Michael Bargury
TalksLinks and materials for Scaling AppSec With an SDLC for Citizen Development
Links, demos, tools and slides for RSAC 2025
Michael Bargury
TalksLinks and materials for Your Copilot Is My Insider
Links, demos, tools and slides for RSAC 2025
Michael Bargury
Security ResearchSure, Let AI Browse the Internet—What Could Possibly Go Wrong?
Internet browsing for AI agents leads to 0click compromise but these mitigations can help
Michael Bargury