Red Teaming Generative AI
Why prompts are payloads, and what an adversarial test plan looks like for systems that 'reason' over untrusted text.
cat ./talks
I accept a few speaking invitations a year. The sessions that work best are the ones that match my practice: threat modeling, adversary simulation, secure architecture, secure code review, and the current focus on red teaming AI systems and MAESTRO-aligned ML security.
If any of these feel right for your audience,email mewith what you have in mind.
Why prompts are payloads, and what an adversarial test plan looks like for systems that 'reason' over untrusted text.
Why classical frameworks miss EchoLeak-class attacks, and the five-zone methodology that finds them.
CSA's layered framework, applied. What it catches that classical AppSec doesn't, and how to build it into your ML platform without slowing the team.
How to stand up the controls, runbooks, and culture for organizations shipping generative AI features, without reinventing the wheel.
Input/retrieval, reasoning, action, state, coordination. A practitioner's map for agentic AI threat modeling that goes beyond enumeration.
A real-world case study on securing Industrial Control Systems (ICS) and IIoT devices at the factory floor boundary without disrupting physical operations.
A few of the recent ones. Happy to talk about any of these in more detail over email.
KSIT, Bengaluru · August 2026
Two-day, hands-on workshop for 50+ CS students: cryptography, network security, and web exploitation against a deliberately vulnerable app. Designed with a full AI red-teaming module and a Capture-the-Flag, which the two days did not reach. Full material open-sourced, including what went untaught.
Industry roundtable (private) · 2026
Closed-door session with senior security leaders on how large regulated enterprises actually buy AI: the five-stage journey, the three-layer evaluation gate, and the residency traps in vendor documentation, plus what the gate should check in 2026 across the threat model, the model supply chain, retrieval, and agents.
Maharshi Markandeshwar University
Practitioner walk-through of red-teaming methodology for LLM-powered applications and ML systems, with reproducible exercises.
Industry roundtable (private)
Invited briefing for senior security leaders on threat modeling for agentic AI, the gaps between framework guidance and production deployments, and concrete remediation patterns.
Industry roundtable (private)
Invited conversation on the state of AI security tooling, where the market is genuinely under-served, and how technical due diligence should change for AI-native companies.
Vapra.shiksha
Hosted a series of talks on cybersecurity craft and applied AI security for an engineering audience.
> 30–45 minutes
Conferences, summits, industry events.
> ½ or full day
Hands-on, methodology transfer.
> 45–60 minutes
Industry panels, moderated discussions.
> 60 minutes
For your team, on-site or remote.
Manish Pandey is a Bengaluru-based Cybersecurity Architect securing AI and agentic systems. He combines 13+ years of hands-on application security craft with an M.Tech in Data Science. He writes on AI red teaming, threat modeling, and how systems that reason fail.
Manish Pandey is a cybersecurity architect securing AI and agentic systems with the rigor of classical security craft. He has spent 13+ years across the full security stack: application security, secure code review, adversary simulation, and cloud security. He holds an M.Tech in Data Science from BITS Pilani, allowing him to audit the underlying ML math rather than trust the marketing claims. Manish writes and speaks on ML security, agentic AI failure modes, and threat modeling aligned to the CSA MAESTRO framework.
> Need a high-resolution headshot or logos? Email me and I'll send the media kit.
> For organizers: short / long bios above, headshot on request viaemail.