What we cover
The attacks business owners now face, each with an explainer and a fix.
Leaked AI API credentials Revoke, rotate, check usage, then find the leak. Plus how to store keys so it doesn't happen again. Distillation attacks Someone queries an AI model at scale to train a cheaper copy of it, often on your account. AI penetration testing Automated attackers find weak spots faster. The same tools can check your own site first. AI bots and crawlers Which bots to allow, which to block, and how to stay visible in AI search. Prompt injection When your chatbot or agent takes orders from a stranger's text. WordPress and PHP patches Updates, plugins and versions to check now that AI finds bugs faster.
01 Leaked AI API credentials
Revoke, rotate, check usage, then find the leak. Plus how to store keys so it doesn't happen again.
Explainer and fix →02 Distillation attacks
Someone queries an AI model at scale to train a cheaper copy of it, often on your account.
Explainer and fix →03 AI penetration testing
Automated attackers find weak spots faster. The same tools can check your own site first.
Explainer and fix →04 AI bots and crawlers
Which bots to allow, which to block, and how to stay visible in AI search.
Explainer and fix →05 Prompt injection
When your chatbot or agent takes orders from a stranger's text.
Explainer and fix →06 WordPress and PHP patches
Updates, plugins and versions to check now that AI finds bugs faster.
Explainer and fix →Latest from the lab
See everything →
LEARN What is a distillation attack? Explained for business owners How stolen API access is used to copy an AI model, and why the bill lands on you. Read → See everything → 
Start with your situation
01 01 I run a business website Find weak spots, patch what matters, and keep bad bots out. View guides → 
02 02 My team uses AI tools Store API credentials safely, cap spending, and know what to do if they leak. View guides → 
03 03 We're building an AI product Distillation, prompt injection and agent security, without the jargon. View guides → Written by people you can check up on.
Every guide is written by Tommy D. Every claim is sourced, every update is dated, and corrections are made in public.