// Research
Proof of capability.
Vulnerability write-ups, benchmarks, and responsible disclosures from the Rift team. For an AI pentester, published research is the only honest proof the agents find real bugs in real software.
// Latest
Write-ups & disclosures
Guide2 min read
How an agent chained an SSRF into cloud-metadata credentials
A walk through the reasoning chain, the exploit, and the responsible-disclosure timeline, start to finish, no human in the loop.
March 4, 2026Read →
Engineering1 min read
Separating explore from verify to kill false positives
Why the agent that finds a weakness should never be the one that decides it's real, and what that buys you.
February 18, 2026Read →
RSS feed · new research roughly biweekly.
// Disclosure index
Credited to Rift agents
Our first coordinated disclosures will be listed here as they publish.
// Stay in the loop
Get new research in your inbox
Disclosures, benchmarks, and engineering notes. Roughly biweekly, no fluff.
Read what the agents found.
New write-ups and disclosures, roughly biweekly. No marketing, just security.