Offensive security · AI · Web3 · Web2
DSEC Labs is a technical security firm delivering exploitation-driven audits across applications, infrastructure, smart contracts, and AI systems, with clear, actionable reporting your engineers can act on.
Research & write-ups
Field notes on offensive security across AI, Web3, and Web2.
An independent, hands-on study series for the OSAI (OffSec AI Red Teamer) exam. Technical notes, real commands, and the offensive-AI concepts you need, one module at a time.
Lakera's Gandalf is the best on-ramp to prompt injection ever built. Here's the full defense taxonomy behind its levels, and why none of it is enough on its own.
The orchestrator trusts whatever it believes is one of its agents. This post attacks that belief two ways: registering a rogue agent into the system, and hijacking a legitimate agent's identity through DNS and hosts-file manipulation.
What we do
From an AI agent to a multi-chain protocol or a web app, we tailor the engagement to your threat model.
Adversarial testing for LLM apps, agents, and model pipelines.
Smart-contract and full-protocol security across EVM and non-EVM chains.
Offensive security across your apps, APIs, cloud, and people.
Threat modeling, secrets reviews, and AI security training.
Why DSEC Labs
Automated scanners find the obvious. We find the vulnerabilities that actually get you breached: chained, exploited, and demonstrated, then explained in a way your team can fix and verify.
Real attack paths, not scanner output dumped into a PDF.
Reproducible PoCs, severity ratings, and clear remediation.
We re-test your fixes so you can prove the risk is closed.
Tight scoping, NDAs, and careful handling of sensitive access.
Tell us what you're building. We'll scope an engagement that fits your stack, timeline, and threat model.
Start a conversation