Vuln-bank is a deliberately vulnerable app for web, API and AI security practice

tom_doerr · x · 2026-08-04

• Vuln-bank is a deliberately vulnerable banking app built for practicing web, API, and AI/LLM security testing.
• The project is meant for security engineers, developers, interns, QA analysts, and DevSecOps practitioners who want a realistic target for learning pentesting and secure code review.
• The README frames it as a safe training environment for common web and API flaws, AI/LLM vulnerabilities, secure coding practices, security testing automation, and DevSecOps workflows.
• The repository is explicitly intended for educational use in isolated environments.

Original post →

More from Safety

• Polymarket gives the U.S. AI safety bill a 16% chance this year — Polymarket · 2026-08-04
• Epoch AI data says critical cyber vulnerabilities at 21 tech firms jumped 500% — Polymarket · 2026-08-04
• Kimi K3 Audit Exposes Critical Vulnerability in Bitcoin App — RSync25 · 2026-08-04
• Protesters Occupy OpenAI HQ, Demanding Altman Back Binding AI Treaty — ShakeelHashim · 2026-08-04
• AI policy should borrow crisis engineering and risk-management playbooks — joshua_saxe · 2026-08-04
• Open Source is the True Bedrock of AI Safety, Argues Researcher — rbhar90 · 2026-08-04

Safety channel →