Cover story
Featured report Security
Apex Field Report
An empirical study of 4,032 machine-generated findings across 612 production web applications and APIs.
Read the featureCantina field notes
Resource center
Practical intelligence for security teams building, reviewing, and operating critical systems.
Cover story
Resource library
32 reports, guides, checklists, playbooks, and webinars. Filter by program area or search by keyword.
No resources match your filters
Try a different program area or clear your search.
Latest research
From the blog
The Loop
The Next Chapter of Cantina
Why Cantina expanded from finding security issues to carrying security work through prioritized, remediated, and verified resolution.
· Cantina
The Loop
Every agent will have a grok build moment. this Is how you handle one
SpaceXAI's Grok Build coding agent was uploading unnecessary repository data; the company's transparent response set industry standards.
· Cantina
The Loop
What four RabbitMQ advisories reveal about broker security boundaries
Analysis of four RabbitMQ security vulnerabilities affecting OAuth permissions, topic access, loopback enforcement, and Direct Reply-To bindings.
· Cantina
Put these playbooks to work
See how Cantina operationalizes this guidance across your codebase, from continuous review to bug bounties and agentic monitoring.