PinnedEng Soon Cheah·Apr 15Promptfoo Red teaming a Chatbase ChatbotIntercept the chatbot’s POST request → map the prompt field to {{prompt}} in redteam.yaml → run init → run → report to generate and review…
Eng Soon Cheah·8h agoMCP Security Testing: 3 Open-Source Tools Every Security Tester Should KnowThe Model Context Protocol (MCP) enables AI applications to interact with external tools, APIs, databases, and enterprise systems. However…
Eng Soon Cheah·5d agoPromptfoo vs NVIDIA Garak vs Microsoft PyRIT: Which AI Red Teaming Tool Should You Use?An in-depth comparison of three open-source tools for LLM security testing, automated vulnerability discovery, and AI red teaming.
Eng Soon Cheah·Oct 31NVIDIA Garak: the nmap of the LLM worldAs Large Language Models (LLMs) become increasingly integrated into business applications, testing their security is no longer optional…
Eng Soon Cheah·Oct 29Practical AI Red Teaming: A Deep Dive into the Garak + PyRIT Dual-ToolchainUsing the OWASP Top 10 for LLM Applications 2026 as its risk framework, this article examines the practical applications of two major…
Eng Soon Cheah·Sep 4Testing an AI Agent — Hermes Agent with PromptfooAI agents introduce a fundamentally different security testing challenge compared with traditional LLM applications.
Eng Soon Cheah·Aug 15MCP Security Testing with Promptfoo — Part 2Continue from MCP Security Testing with Promptfoo — Part 1.
Eng Soon Cheah·Aug 15MCP Security Testing with Promptfoo - Part 1How I used Promptfoo to test a remote MCP Petstore server for authentication, authorization, injection, tool abuse, and AI-specific attack…
Eng Soon Cheah·May 23Prowler LLM Security Testing: A Practical Framework for Red Teaming Large Language Models🚨 Intro: LLMs Are Powerful — And Now They’re Attack Surfaces
