Insights
Guides, analyses and findings from the HafezSecure team: penetration testing, secure development, protection and monitoring.
AI Security
Prompt injection in Persian chatbots
Persian text can carry the same instruction in a form your filter does not recognise and the model reads perfectly. How to test for it, and what to fix.
AI security
How to security-test an LLM application
What changes when the application under test runs on a language model, the eight areas to cover, and how to report an attack that is not reliable.
Penetration testing
What a penetration test report must contain
The sections a useful penetration test report has, what each one is for, and the questions to ask before you accept a deliverable that is missing them.
Penetration testing
Vulnerability assessment vs penetration test
The two are bought for different reasons and priced differently. How they differ in method, depth and output, and a simple rule for which one to order this quarter.