AI-Accelerated Security
Put AI to work inside your pipeline, speeding up secure development and cutting the time from finding to fixing.
- AI-assisted code and config review
- Automated triage and remediation
- Security context where developers work
Senior Principal Security Architect
Secure the AI you build, and the AI you run.
I help teams secure what they build with AI and defend the AI workloads they run, with guardrails that hold across the software and AI development lifecycles.
- 10+ Years in security
- 9+ Open-source security tools
- 1,379 GitHub stars
01 Services
How I Can Help
AI-security engagements that keep your teams moving and your AI safe.
AI Security Governance & Guardrails
Guardrails and enforcement for AI, wired into your SDLC and ADLC so safe defaults ship automatically.
- AI usage policy and approval guardrails
- Controls enforced in CI/CD and the AI pipeline
- Governance mapped to your real workflows
- Evidence and auditability built in
Securing AI Workloads
Threat modeling and hardening for LLM apps and AI agents, from prompt-injection to the model supply chain.
- LLM app and agent threat modeling
- Prompt-injection and tool-abuse defenses
- MCP and model supply-chain review
Cloud & AWS Security
The architecture foundation: hardened AWS accounts and least-privilege access your AI systems can build on.
- AWS account and identity hardening
- Least-privilege access at scale
- Detection and response readiness
02 About
Who I Am
I'm Avishay Bar, a Senior Principal Security Architect at Palo Alto Networks, where I've spent the past eight years. I work on securing AI: helping teams adopt it safely and defend the AI systems they ship, while using AI to make security itself faster. I hold a patent for securing the development lifecycle with AI, and I spend my days where new AI risk meets real-world engineering.
- AI Security Governance
- Securing AI & LLM Workloads
- AI-Accelerated DevSecOps
- Cloud & AWS Security
03 Work
Security & AI Tooling, in the Open
Projects and vulnerable-by-design labs, ordered by stars and pulled live from GitHub.
react-native-restart ★ 991
⭳ 954k/mo
React Native Package With One Purpose: To Restart Your React Native Project
caponeme ★ 244
Repository demonstrating the Capital One breach on your AWS account
cdk-goat ★ 48
Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure
home-cluster ★ 39
My home Kubernetes (k3s) cluster managed by GitOps (Flux)
jupyter-ecs-service ★ 24
https://avishayil.medium.com/serverless-jupyter-hub-with-aws-fargate-and-cdk-2160154187a1
cf-signer ★ 15
Tool for signing and verifying the integrity of CloudFormation templates
04 Posts & Notes
Posts & Notes
Short takes from LinkedIn and longer pieces from the blog, in one place.
Finishing the AI Security Engineer Foundations track
How Dream's researchers exposed an AI-agent attack campaign
Model-provider defense layers, and the shrinking response window
AWS IAM Role Manager and getting trust policies right
Security gates in CI/CD: the recurring DevSecOps debate
You Shouldn’t Use the EC2 Launch Wizard
05 Speaking
Talks & Workshops
Practical AWS Security
A hands-on walkthrough of hardening a real AWS account: the identity and network fixes you can ship the same day.
▶ Recording soon ◱ Slides
Shift Left: Security in the Pipeline
Moving security controls into CI/CD so issues are caught before they ever reach production.
▶ Recording soon ◱ Slides
Let's secure what you're building.
Book a free 30-minute intro call and leave with a clear next step.
06 Follow
AI Security & Cloud Notes
Latest posts
- LinkedIn Finishing the AI Security Engineer Foundations track
- LinkedIn How Dream's researchers exposed an AI-agent attack campaign
- LinkedIn Model-provider defense layers, and the shrinking response window
- LinkedIn AWS IAM Role Manager and getting trust policies right
- LinkedIn Security gates in CI/CD: the recurring DevSecOps debate