The SecuritAI blog: AI security, explained.
Practical guidance on securing LLMs, chatbots, and AI agents: prompt injection, jailbreaks, governance, and the Canadian AI regulatory environment. Topics map to the OWASP LLM Top 10.
What is Bill C-8? Canada’s critical infrastructure cybersecurity law explained
Which sectors C-8 covers, what designated operators must do, and where AI fits in.
Read article →
Bill C-8 compliance checklist for critical infrastructure operators
All four C-8 obligations covered, including the AI layer most programs have missed.
Read article →
How Bill C-8 applies to AI systems in critical infrastructure
What AI-specific controls regulators will expect, and why traditional programs don’t cover them.
Read article →
AI Agent Security Starts With Least Privilege
What six cyber agencies, including Canada’s, say about agent identity, short-lived access and limits outside the model.
Read article →
LiteLLM Vulnerability: Your AI Gateway Is a Target
CVE-2026-59822 is on CISA’s exploited list. What happened, how to check if you are affected, and what to fix this week.
Read article →
AI Model Distillation: Your API Can Be Copied
What the September 2026 CISA, NSA and FBI advisory says, and the usage signals any company with an AI API should watch.
Read article →
LLM Jailbreak Prevention: How to Block Attacks
How jailbreaks work, why static rules miss them, and the firewall layers and testing that catch them before they reach your model.
Read article →
AI Vendor Risk Assessment: What to Ask Before You Buy an AI Tool
The questions to ask an AI supplier about your data, the model underneath, testing and the contract, and the evidence to demand.
Read article →
ISO 42001 Canada: What the AI Management Standard Requires
What the AI management system standard asks for, how it differs from NIST AI RMF, and what Canadian buyers check.
Read article →
AI System Register: What Canadian Companies Should Record About Every Model
An AI system register lists every model you run, who owns it, what data it touches and when it was reviewed.
Read article →
AI penetration testing vs classic pentesting: what actually changes
Why model behaviour cannot be patched shut like a code flaw, and what a useful report has to contain.
Read article →
NIST AI RMF: a practical guide for Canadian companies
What Govern, Map, Measure and Manage look like in practice, and the evidence buyers ask for.
Read article →
LLM security: a complete guide
What LLM security is, the OWASP LLM Top 10 risks, and how to protect your LLM applications.
Read article →
What is an AI firewall? A plain-English guide
How AI firewalls work, what they block, and how to choose one for your LLMs and AI agents.
Read article →
AI guardrails vs an AI firewall: what is the difference?
Where guardrails stop working, and the extra layers of security an AI firewall adds on top.
Read article →
What is prompt injection? A plain-English guide
How attackers hijack LLMs with hidden instructions, and how to stop them.
Read article →
AI governance in Canada: PIPEDA, NIST AI RMF, and what’s next
What Canadian organizations must do as AI regulation tightens.
Read article →
Red-teaming your chatbot before launch
A practical checklist for testing AI features against real attacks.
Read article →
Want this applied to your AI?