Aisvs on Sakura Sky: Cloud, Data, Security

The Regulatory Stack, Part 2: Why the Boardroom Should Be Funding the Verification Layer in 2026

Thu, 21 May 2026 00:00:00 -0400

The capital deployment decisions boards make this year will determine whether their autonomous AI systems are governable assets or existential liabilities by 2027. Here is the strategic case.

The Regulatory Stack, Part 1: AISVS Has 14 Categories. GATE Has 16 Controls. Here Is the Map.

Tue, 19 May 2026 00:00:00 -0400

AISVS tells you what to verify. The AI Act tells you that you must. Neither tells you how to enforce. This is the engineering map.

OWASP Just Drew a New Map, Read It Before Your Auditors Do

Thu, 07 May 2026 00:00:00 -0400

The Foundation’s new strategic plan is not a community update. It commits OWASP to setting the technical floor for AI security, secure-development competence, and EU compliance. Three things on it should already be on your roadmap.

Your Most Powerful User Is Your Growing Security Blind Spot

Wed, 20 Aug 2025 00:00:00 -0400

I’ve spent countless hours in boardrooms and design sessions recently, and the conversation is always the same: AI. Many have been captivated by the immense potential of Large Language Models, autonomous agents, and AI-powered copilots. We’re integrating them into our workflows, connecting them to our APIs, and pointing them at our most valuable data.

Understanding & Addressing the Critical Concerns of API Security

Wed, 17 May 2023 00:00:00 -0400

An API, or Application Programming Interface, is a set of protocols or rules that allow different software applications to communicate with each other. APIs define the methods and data formats that applications can use to request and exchange information.

Security, Penetration, & Compliance Testing

Tue, 31 Mar 2015 00:00:00 -0400

Sakura Sky has introduced a new range of security, penetration, and compliance testing services including vulnerability, configuration, and compliance scanning. Featuring high-speed discovery, configuration auditing, asset profiling, malware detection, sensitive data discovery, and vulnerability analysis.