Yacine Souam

Yacine Souam

Yacine Souam — Last Publications

Jev and the Future of AI Pentesting: Why the Harness Matters More Than Ever
Security Research

Jev and the Future of AI Pentesting: Why the Harness Matters More Than Ever

Were we wrong to use LLMs & Agents for security? Security professionals are fully embracing agents for security workflows, from finding vulnerabilities in code to investigating and triaging security issues. And for good reason: many of these tasks require complex reasoning and the ability to understand how applications work. But
Yacine Souam
Yacine Souam
10 min read
AI vs AI: How Cascade exploited an AI agent in production
Research

AI vs AI: How Cascade exploited an AI agent in production

We pointed Cascade, Escape's AI pentesting engine, at a production AI agent. The agent had a guardrail built to catch prompt injection. Cascade got past it on the second try. The trick wasn't a smarter payload, just a different pretext, and the agent handed over its
Yacine Souam
Yacine Souam
4 min read
How Escape AI Pentesting Exploited SSRF in LiteLLM
Agentic Pentesting

How Escape AI Pentesting Exploited SSRF in LiteLLM

At Escape, we routinely test the AI infrastructure that teams deploy inside their cloud environments. LLM gateways, RAG pipelines, model proxies: these are services that make outbound HTTP requests by design, which makes them natural targets for SSRF. When we looked at LiteLLM, we found three confirmed SSRF sinks, a
Yacine Souam
Yacine Souam
9 min read

Escape Blog Squad