Resources
Practical security references you can reuse.
Robert Lackey's frameworks, checklists, and templates for product security, AI security, threat modeling, and offensive-informed defense.
Topic Paths
Choose the problem you are working on.
These paths collect the best starting points by job-to-be-done, so a reader can move from broad judgment to a specific review habit without guessing where to begin.
Product Security
Start with product security fundamentals.
Build the mental model for secure design, threat modeling, authorization, tenant boundaries, and useful engineering review.
AI Security
Review AI systems as product systems.
Focus on agents, tools, memory, retrieval, logs, provenance, and the places where model behavior meets product authority.
Offensive-Informed Defense
Turn exploitation practice into prevention.
Use hands-on mechanics to sharpen evidence, root cause, code review, and fixes that engineers can actually apply.
Playbook
Offensive Security With AI
A public-safe playbook for using AI in vulnerability research without handing it the judgment.
Read the playbook- Scope Write down what is authorized, what is excluded, and what question is being tested.
- Trace Follow the path from input to consequence and do not skip the middle.
- Probe Use the smallest safe check that answers the next question.
- Decide Escalate, scope down, pivot, or stop based on the evidence.
Guide
Offensive Security For Defenders
A technical practice plan for turning exploitation mechanics into better design review, code review, evidence, and prevention.
Read the guideChecklist
Practical Threat Modeling
A lightweight worksheet for finding trust boundaries and risky assumptions early.
Use the checklistReference
AI Security Review Notes
A practical review checklist for AI features, agents, tool access, context, memory, logs, and output trust.
Review the notesPlaybook
Sink-First Code Review
A repeatable playbook for starting from sensitive operations and tracing backward to input.
Read the playbookTemplate
Minimal PoC Notes
A fill-in template for keeping hypotheses, evidence, cleanup, and research decisions honest.
Use the templatePrompts
Better AI Research Steering
Prompt patterns for keeping AI-assisted security research grounded in state, scope, and evidence.
Use the promptsGuide
Product Security For Beginners
A practical starting point for engineers who want to understand product security, threat modeling, secure design, and evidence-based review.
Read the guide