Offensive security
Adversarial testing of LLM, RAG and agent systems, identity abuse research, and open tooling that finds the flaw before an attacker does.
Papers
Agentic Security Validation Framework for Retrieval-Augmented and Tool-Enabled Large Language Model Systems (ARGUS)
Sunil Gentyala, N. Sudhakar Reddy, Kothapalli Chaitanya Deepthi, Pathapati Saroja, Kammara Venkatarangaiah Achari, Ruhisulthana Shaik
CyberFuse-CI: Adversarially Resilient Vulnerability Detection Through Heterogeneous Multi-Source Data Fusion and LLM-Augmented Reasoning
Sunil Gentyala, Sunil Kumar Mudusu, Satish Kumar Allani, Manasa Pendyala, Rakesh Prakash, Praveen Kumar Mannam
Articles and whitepapers
MCP Fixed Secret Handling. URL Elicitation Moved the Phishing Risk Into the Browser
When the Prompt Becomes the Payload: A Practical Pen-Testing Guide for GenAI, LLM and RAG Applications
4 Million Fake Applications and One Blind Spot: A SOC Playbook for OAuth Client ID Spoofing
The Ghost Applications: How OAuth Client ID Spoofing Enumerates Microsoft Entra Accounts Without a Successful Sign-In
LLM-Generated Passwords Are Indefensible. Your Codebase May Already Prove It
Why 2025's Agentic AI Boom Is a CISO's Worst Nightmare
Navigating the Liminal Edge of AI Security: Deconstructing Prompt Injection, Model Poisoning, and Adversarial Perturbations in the Cognitive Cyber Domain
The New Frontier of Cyber Threats: Unpacking Prompt Injection, Model Poisoning and Adversarial Attacks in AI Security
Projects
hrpq-gap-scan
CLI that audits HRPQ preload and cookie-scoping downgrade gaps in post-quantum HTTPS migrations. Companion to the SC World analysis.
ARGUS
Autonomous vulnerability discovery for retrieval-augmented and tool-enabled LLM systems.
genai-llm-pentest-harness
Reference implementation for the CSO Online pen-testing guide on GenAI, LLM and RAG applications.
PRAVAL
Ten-phase agentic vulnerability-assessment framework.
DockerDNA
Layer-by-layer container security analysis: secrets detection, CIS Docker Benchmark mapping, CycloneDX SBOM and SARIF output.