Research at SynaptoSec.
Published research our detection layers build on, and how we measure ourselves.
We measure our own system, test it against public benchmarks, and build on published research. Our original research program is planned.
Our research.
Original research we are conducting. We publish results when the methodology is complete, the numbers are measured, and the findings are reproducible. We do not claim novelty we do not have.
No published research yet.
We are an engineering team, not an academic lab. We are working toward original research in agentic AI security. Until findings are genuinely novel, measured, and reproducible, we do not publish them here.
Research we build on.
SynaptoSec applies published research from Anthropic, OWASP, ICML, USENIX, and arXiv. We do not claim authorship. We document where each paper is applied in our product.
Anthropic, 'Sleeper Agents: Training Deceptive LLMs that Persist Through Safety Training,' arXiv:2401.05566, Jan 2024.
↗Anthropic, UK AISI, Alan Turing Institute, 'Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samples,' Oct 2025.
↗MINJA: Memory Injection Attack, 2026.
↗OWASP LLM01:2026 — Prompt Injection.
↗OWASP ASI06 — Memory Poisoning.
↗PoisonBench, ICML 2026.
↗Nasr et al., 'The Attacker Moves Second,' USENIX Security 2026.
↗DAVSP, AAAI 2026 — Adversarial Image Jailbreak Defense.
↗MemAudit, "Post-hoc Auditing of Poisoned Agent Memory," arXiv:2605.23723
↗MemSentry, "A Framework for Detecting Persistent Memory Poisoning," arXiv:2609.08747
↗OWASP Agent Memory Guard (ASI06 reference implementation)
↗Collaborate.
We collaborate with academic groups, security researchers, and enterprise teams on adversarial evaluation. If you work on agent security, prompt injection, or training-data integrity — reach out.
