Aaron Ott
Cybersecurity leader & AI security researcher — helping teams bridge security, AI, and resilience.
I believe security should be human‑centered and AI‑resilient. That’s why I write, test, and share here.
Featured
AI Security in 2025: What I Learned, and What I'll Be Watching for in 2026
Post
A weekend deep dive into three major AI security reports from 2025, what actually broke in the real world, and where security teams should focus their attention in 2026.
Pen Testing With Claude 4.5
Post
Claude 4.5 ran a 15 minute pen test on my lab, finding 21 real vulnerabilities — powerful but with notable blind spots like XSS.
When Do You Trust AI
Post
Exploring the 'trust thermometer' problem with AI: how to balance efficiency, verification, and judgment when working with inconsistent outputs.
About
I’m Aaron — OSCP/CISSP/CSSLP and an application‑security leader focused on building AI‑resilient systems. I write playbooks, ship tools, and help teams move fast without breaking everything important.
- Focus areas: NIST CSF 2.0, AppSec leadership, AI security & resilience
- Currently exploring: prompt‑injection labs, AI‑first DR, threat modeling for startups
- Human stuff: dogs, hiking, and whiskey
Latest writing
-
AI Security in 2025: What I Learned This Weekend, and What I'll Be Watching for in 2026
A weekend deep dive into three major AI security reports from 2025, what actually broke in the real world, and where security teams should focus their attention in 2026.
-
Learning n8n by Building: A Small Experiment With Big WYSIWYG Energy
A small morning-weather automation taught me how n8n thinks. It felt a lot like building with early WYSIWYG editors, only this time the output is real …
-
Pen Testing With Claude 4.5
I gave Claude 4.5 access to a Kali box and an intentionally vulnerable app. In 15 minutes it found 21 real vulnerabilities — useful, but with notable blind spots. When is AI useful for pentesting, and when should humans stay in the loop?
-
When Do You Trust AI
Exploring the 'trust thermometer' problem with AI: how to balance efficiency, verification, and judgment when working with inconsistent outputs.
-
Coding With Chatgpt vs Claude Code
I built a lightweight analytics stack: ChatGPT for fast scaffolding, Claude Code for surgical repo edits—steal the prompts, guardrails, and NGINX lessons.