What is a distillation attack? Explained for business owners
How stolen API access is used to copy an AI model, and why the bill lands on you.
01
Leaked AI API credentials
Revoke, rotate, check usage, then find the leak. Plus how to store keys so it doesn't happen again.
Explainer coming. Start with the fix
02
Distillation attacks
Someone queries an AI model at scale to train a cheaper copy of it, often on your account.
03
AI penetration testing
Automated attackers find weak spots faster. The same tools can check your own site first.
What is AI penetration testing, and do you need it?
What an AI pentest checks, how it differs from a plain scanner, and whether a small business needs one.
How AI attackers work: what changed in 2026
How attackers hand the search for weak spots to AI agents, in plain English.
What an AI-run cyberattack looks like (the GTG-1002 case)
The campaign Anthropic disrupted in 2025, walked through from Anthropic's own report.
04
AI bots and crawlers
Which bots to allow, which to block, and how to stay visible in AI search.
Bots are now most of your traffic: what that means for your site
Good bots, bad bots and AI crawlers, and how each one shows up in your logs and bills.
05
Prompt injection
When your chatbot or agent takes orders from a stranger's text.
Prompt injection explained for businesses using chatbots and agents
How a stranger's text can steer your chatbot or agent, and the limits that stop it.
06
WordPress and PHP patches
Updates, plugins and versions to check now that AI finds bugs faster.
Explainer coming. Start with the fix
