The PromptInjects blog

Learn prompt injection by doing it.

Learn prompt injection by doing it: practical explanations, safe examples, and hands-on AI security challenges.

Practical guides

How to Defend an LLM App Against Prompt Injection: A Practical Checklist

A practical checklist for teams shipping LLM features: layered controls that contain prompt injection, and the popular fixes that fail on their own.

Read the post →
Workshops

AI Literacy Under the EU AI Act: What Security Awareness Should Cover

Article 4 of the EU AI Act asks for AI literacy. Here is why prompt injection and data leakage belong in it, and what a practical, role-based program covers.

Read the post →
Fundamentals

Prompt Injection in AI Agents and MCP: How Tool Poisoning Works

How prompt injection changes once an AI agent can call tools: MCP basics, tool-description poisoning, confused deputies, and cross-tool exfiltration.

Read the post →
Workshops

How to Run an AI Security Awareness Session Your Team Remembers

A practical 45-minute format for making prompt injection memorable: safe challenges, a live debrief, and controls people can use at work.

Read the post →
Practical guides

Direct vs Indirect Prompt Injection, With Examples

Direct attacks come from the user; indirect attacks arrive through content an AI reads. Learn the difference with safe examples and practical controls.

Read the post →
Case studies

Prompt Injection Examples: 6 Real Incidents Explained

Six documented prompt-injection incidents—from chatbots to enterprise copilots—show how untrusted text can leak, mislead, or trigger actions, and what to fix.

Read the post →
Fundamentals

Prompt Injection vs Jailbreaking: What's the Difference?

Prompt injection and jailbreaking overlap, but they describe different failure boundaries. Learn the distinction and choose controls that survive both.

Read the post →
Fundamentals

How Prompt Injection Works (With a Game You Can Try)

A plain-English guide to prompt injection, the top OWASP LLM risk, with first principles, safe examples, and a real challenge to try.

Read the post →
Prefer to just play?

Break an AI now.

Open challenges are free and need no login.

Browse challenges