MCP Security Testing Guide
Tool-vendor recipes for testing MCP integrations, including tool poisoning and data-exfiltration scenarios. Adapt the examples to your deployment.
AN INDEPENDENT MAP OF AI SECURITY
Find your next
good source.●
Original research, practical guides, and trusted starting points. A smaller, more useful way into AI security.
— sources— selected readings08 topics
A question, a topic, or the source you already know.
Curated links. Original publishers.
EXPLORE THE INDEX
A little direction goes a long way.
The directory could not refresh. Your previous results are still here.
Promptfoo red teaming documentation
Practical testing recipes and open-source tooling documentation from the tool vendor, useful for constructing repeatable application evaluations.
Mitigating the risk of prompt injections in browser use
Anthropic describes browser-agent defenses and its own evaluations. Useful for understanding layered controls and remaining risks, with vendor-reported results.
MITRE ATLAS
An adversarial AI knowledge base of tactics, techniques and case studies for threat modeling and investigation.
Anthropic Research
Model-provider research on agent behavior, evaluations and defenses. Read reported results as vendor experiments with stated conditions.
Microsoft AI Red Team
First-party planning guides, lessons and tooling from Microsoft’s AI Red Team, useful for scoping and running assessments.
Planning red teaming for large language models (LLMs) and their applications
Microsoft’s planning guide covers assessment scope, people and process. Useful before selecting automated attack tooling or defining evaluation goals.
MITRE ATLAS tactics, techniques, and case studies data
The maintainers’ structured ATLAS data supports threat-model lookups and agent workflows. Preserve technique identifiers and linked case-study provenance.
arXiv Cryptography and Security
Find recent security preprints and original papers. A posting is not peer-review approval; inspect methods, revisions and linked artifacts.
Auditing in the age of (good enough) AI
Trail of Bits describes using AI agents to build auditing tools and formal models for a Miden VM security review. Useful for exploring AI-assisted audit workflows.
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
Wiz Research article on an autonomous red-agent exercise involving a GitHub Actions injection in a Copilot-assisted pull request and an assessment of access to internal Jira.
A path we haven't mapped yet.
Try a broader topic or clear a filter.
“Newest” uses the original publication date. Undated guides remain available in curated order.
Directory revised
A USEFUL TOOL IN YOUR AGENT'S TOOLBOX
Let your agent start
with better references.
The same selected sources, with original links and clear dates.