https://www.greywatch.ai/https://www.greywatch.ai/about/https://www.greywatch.ai/journal/https://www.greywatch.ai/journal/ai-generated-code-vulnerabilities/https://www.greywatch.ai/journal/batching-past-the-rate-limit/https://www.greywatch.ai/journal/billing-api-no-front-door/https://www.greywatch.ai/journal/case-sensitive-lock-case-insensitive-door/https://www.greywatch.ai/journal/default-password-document-vault/https://www.greywatch.ai/journal/directory-listing-on-the-document-store/https://www.greywatch.ai/journal/email-is-not-identity/https://www.greywatch.ai/journal/exposed-cloud-database/https://www.greywatch.ai/journal/mcp-server-infrastructure-control/https://www.greywatch.ai/journal/mental-health-database-open-read/https://www.greywatch.ai/journal/new-accounts-born-as-executives/https://www.greywatch.ai/journal/no-lock-on-the-gpu/https://www.greywatch.ai/journal/one-signup-another-banks-loan-book/https://www.greywatch.ai/journal/one-traversal-every-tenant/https://www.greywatch.ai/journal/otp-brute-force/https://www.greywatch.ai/journal/phone-number-in-cardholder-data-out/https://www.greywatch.ai/journal/prompt-injection-agent-abuse/https://www.greywatch.ai/journal/secrets-in-client-code/https://www.greywatch.ai/journal/sign-up-then-read-every-patient/https://www.greywatch.ai/journal/signup-privilege-defaults/https://www.greywatch.ai/journal/the-git-folder-that-leaked-the-crm/https://www.greywatch.ai/journal/the-helper-proxy-that-owned-the-cloud/https://www.greywatch.ai/journal/the-login-that-was-supposed-to-be-off/https://www.greywatch.ai/journal/the-maintenance-api-that-ran-the-network/https://www.greywatch.ai/journal/the-onboarding-link-was-a-skeleton-key/https://www.greywatch.ai/journal/the-password-reset-that-emailed-the-attacker/https://www.greywatch.ai/journal/the-payment-key-anyone-could-spend/https://www.greywatch.ai/journal/the-sandbox-that-trusted-its-parent/https://www.greywatch.ai/journal/the-signup-form-that-made-me-admin/https://www.greywatch.ai/journal/the-social-login-that-trusted-the-client/https://www.greywatch.ai/journal/the-test-token-that-shipped/https://www.greywatch.ai/journal/unauthenticated-mcp-server/https://www.greywatch.ai/journal/unauthenticated-sibling-service/https://www.greywatch.ai/journal/vulnerability-chaining/https://www.greywatch.ai/journal/when-the-trust-boundary-is-the-domain/https://www.greywatch.ai/product/https://www.greywatch.ai/solutions/continuous-penetration-testing/https://www.greywatch.ai/vs/ai-pentest/https://www.greywatch.ai/vs/cobalt/https://www.greywatch.ai/vs/scanner/