Field notes from the
frontier of product security.
Field notes, research and product thinking from the frontier of building continuous product security for the AI-era SDLC.
LatestThreat modeling in the AI era: what works and what does not
Why one-shot LLM threat models fail, which frameworks fit AI agents and MCP, four real incidents, and how continuous threat modeling keeps up.
Read the post
Reykur is joining Tech4Trust
We are part of Season 8 of Tech4Trust, Switzerland's accelerator for cybersecurity startups. What the programme is, why we applied, and what comes next.
Read the post
4,500 websites leaked their source code in 2024. Here's how many still do in 2026.
Truffle Security counted 4,500 top-1M sites exposing .git in 2024. We re-ran the scan in 2026: 3,618 still do. Same bug, same one-line fix.
Read the post
Your AI coding assistant is quietly shipping your secrets
Coding agents write settings, logs and helper files into your repo that were never meant to leave your laptop. Where they end up, what they contain, and how to stop shipping them.
Read the post
Get early access
Be among the first to try Reykur and help shape continuous product security.
No spam. We'll only email you about Reykur.