Sanjana is a Growth Marketer at Escape, with a background in marketing in finance and a growing focus on API and application security. She constantly contributes research and insights into the current landscape of AppSec tools and trends.
AI pentesting
Disclosure-to-exploit time is now hours, not weeks. Escape Continuous AI Pentesting tests only what each release changes, on every merge, deploy, or schedule. Attack paths are tailored from past reports and with OSCP certifications you can always stay audit-ready.
php2shell is a pair of critical memory-safety vulnerabilities in the PHP engine itself, tracked as CVE-2026-109618 and CVE-2026-109619. Escape detects affected PHP versions across your attack surface and shows you every exposed asset that needs the patch. php2shell is not a WordPress bug, a Drupal bug, or a bug in your code. It is in PHP itself. Both CVEs trace back to the same weakness: when a fatal error, usually out of memory, interrupts a request, PHP destroys the request heap but leaves so
Developers are standing up AI agents and MCP servers faster than security can test all the data flows they introduce, and often faster than anyone can agree on the guardrails. Layer on the APIs behind them and you have a whole new attack plane. The use of AI systems in applications has exploded across the board, and in high-stakes environments, from finance to healthcare and everything in between. Yet the APIs behind the MCP server see broken authorization or too much trust in their caller, a
Announcement
After announcing our channel partner program last month, we are excited to now be working with eleven incredible partners, with more soon to join us! Escape's Channel Partner Program is built on a simple principle: a two-way relationship centered on the shared goal of helping security teams do more with the people they have. Our channel partners all play an imperative role in ensuring that these security teams can slot Escape into their security stack and existing workflows to build a continuo
Offensive Security
Discover a guide to what automated penetration testing is, how it works, and best practices when looking for a vendor and implementing automated pentesting.
AI pentesting
Continuous penetration testing tools close the gap in coverage left by annual pentests. This guide breaks down the best options, what each tool actually does, and how to choose.
Case Study
Sigma Computing needed GraphQL-native DAST, not a REST crawler with GraphQL bolted on. Here's how they got full endpoint coverage and slashed their triage time with Escape.
Application Security
Discover a practical guide to GraphQL security tools, an in-depth comparison, and how to choose the right ones for your stack.
Announcement
Join Escape's partner program to build offensive security into every stack, together.
Pentesting
Race our AI in a series of pentesting challenges to try and beat its time.
Webinar recap
Senior Security Engineer Geet Pradhan and Escape CEO Tristan Kalos run through how to use Claude to automate security engineering through threat modeling, detection engineering, and incident response
Compliance
The EU’s Cyber Resilience Act is reshaping how companies build and secure digital products. Learn why modern DAST is critical for CRA compliance from secure development to incident response and how to prepare before the 2027 deadline.
Case Study
Arkose Labs is a global cybersecurity company that specializes in account security, including bot management, device ID, anti-phishing and email intelligence. Its unified platform helps the world’s biggest enterprises across industries, including banking, gaming, e-commerce and social media, protect user accounts and digital ecosystems from malicious automation, credential stuffing and other types of online scams and abuse while ensuring legitimate consumers have a safe and seamless experience.
Product updates
Escape has created the first ever push-to-post automation to revolutionize vulnerability management by giving you the recognition you deserve.
Compliance
If you're responsible for security at a financial services or fintech company, here is your comprehensive overview of what you need to do to be compliant.
Announcement
Discover all of the exciting events you can find us at this March and April!
Webinar recap
Discover exactly how to avoid the common security pitfalls during M&A from our panel of experts, who are drawing from decades of experience in the field.
Webinar recap
Modern applications come with a whole host of challenges that legacy SASTs and DASTs simply cannot keep up with. If you want to be sure no vulnerabilities slip through the cracks in these applications, the key is combining a modern SAST and DAST. Why? Last week, Escape’s CEO Tristan Kalos brought the DAST, and Amit Bismut, Head of Product at Backslash Security, brought the SAST, as they joined forces to explore exactly that, in a webinar titled “The Future of AppSec: SAST + DAST combined for c
Webinar
Join experts Amit Bismut and Tristan Kalos as they give you actionable insights and practical examples on how to harness SAST and DAST together to create a robust security strategy.
The Elephant in AppSec
Discover key highlights from Tanya Janca's talk at The Elephant in AppSec Conference on shifting security to be present throughout the entire Software Development Lifecycle.
Application Security
Key takeaways from highly experienced industry experts on how to scale application security from the panel in Track 1 of The Elephant in AppSec Conference.
API Security
Highlights from Escape's talks at The Elephant in AppSec Conference on the challenges of API security and how Escape is overcoming these
The Elephant in AppSec
Here are the key takeaways from the Elephant in AppSec Conference, uncovering the top insights from industry experts in application security.
