All posts
Topic · 5 articles
OWASP: articles and guides
5 PlayCISO articles on OWASP, newest first. The most recent is “OWASP Agent: OpenCRE’s AI Guide to OWASP, Explained”.
OWASP Agent: OpenCRE’s AI Guide to OWASP, Explained
OpenCRE launched OWASP Agent, an AI assistant that answers from all of OWASP plus NIST, ISO and MITRE, with source links. What it does, limits, how to use it.
November 1, 2026
webhacklist.com: The Web Hacking Techniques Index
webhacklist.com is a free archive of 1,100+ web-hacking techniques from 2006 on, each saved as Markdown and PDF. Who built it, its views, and how to use it.
October 11, 2026
OWASP AISVS Explained: AI Security Verification Standard
OWASP AISVS (AI Security Verification Standard) turns AI and LLM app security into testable requirements. What it covers, vs ASVS and the LLM Top 10.
September 26, 2026
OWASP MCP Governance and Risk: Allow That Server?
A CISO guide to the OWASP MCP Governance and Risk Project: the four gates (owner, logging, scope, review), Tier 0-4 tiers and the risk model.
September 7, 2026
Prompt Injection: What It Is, Attack Examples & Defense
What is prompt injection? Direct vs indirect attacks, real examples, why NCSC and OWASP say it cannot be fully fixed, and how to detect and prevent it.
January 6, 2026