About

whoami

I’m Ben-Hur Santos Ott. I write about software security (aka AppSec, DevSecOps, etc), and the awkward new problem of securing systems that take instructions from strangers and act on them, we like to call them “AI Agents”.

This site is field notes, not tutorials. Most posts start as something I had to work out during an assessment or while shipping code, written down so I stop re-deriving it.

Everything is filed by tag, and there’s an RSS feed if you’d rather not remember to come back.

ls -a

Code on GitHub, shorter thoughts on X, work history on LinkedIn, and video on YouTube.