Subscribe

We've Been Building

We have been quiet for a few months. Here is what happened.

We've Been Building

We have been quiet for a few months. Here is what happened.

The Site

Everything is at ItsBroken.ai. Blog, shop, tools, API, all under one roof. You can read a post, look up a technique, ask the chatbot a question, drop something in your cart, and check out without ever feeling like you went somewhere else. The navigation is the same everywhere. The search works across everything. If you are looking at a FORGE technique and you want to find the Cheat Sheet entry that breaks the same pattern, you do not have to open a new tab or remember which page lives where. It is all right there.

That is what we were after. A site that feels like a single place you can move around in, not a set of links you hop between. The kind of experience where you stop thinking about where things are and just use them.

Mobile

More than half of our traffic comes from phones, and we wanted the mobile experience to reflect that. We rebuilt it with its own component tree instead of just shrinking the desktop version down. Tab bar at the bottom where your thumb already is. Touch targets sized for actual fingers. A cart drawer that slides the way you expect it to. Content that reflows and stays readable at every screen size.

The goal was for it to feel like an app without being one. No install, no app store, just a site that works the way your phone already taught you to expect things to work. If you have not visited on mobile in a while, pull it up. It is a different experience now.

The Tools

FORGE, the AI Security Cheat Sheet, and RAGdrag are all still there, but the way you can get to them has changed.

All three now have public APIs. REST endpoints, no account, no key. You can search across techniques, filter by category, and pull individual entries by ID. If you are building something and need a FORGE pattern or a Cheat Sheet technique in your workflow, you can pull it programmatically instead of copy-pasting from the site.

If your agent speaks MCP, you can point it at mcp.itsbroken.ai/mcp and it gets structured access to all three tools at once. 73 FORGE techniques for building agentic systems, 64 Cheat Sheet techniques for finding where those systems break, and the full RAGdrag kill chain for RAG pipeline security. Your agent can search, pull entries, list categories, and grab RAGdrag payload templates without you having to feed anything in manually.

We also added a chatbot on the site. If you have a question about any of the three tools, you can just ask it. It pulls the relevant techniques, categories, and methodology and gets you pointed in the right direction. Not everyone wants to browse documentation or remember which framework covers what. Sometimes you just want to type "how do I test a RAG pipeline for poisoning" and get an answer with the right techniques attached.

We built all of this because we were doing it by hand. Every time we needed a technique in a prompt, we would open the site, find it, copy it, paste it into whatever we were working on. Dozens of times a week. We were the bottleneck between our own tools and our own work. Now our agents pull what they need without us in the middle, and yours can too.

The Shop

The shop is part of the main site now. Apparel, stickers, and a few new items with the ItsBroken logo. Made to order, small runs. People asked for it and we like making things. Browsing and cart are all integrated into the same experience as the rest of the site, so you are never bounced out to somewhere else to finish a purchase.

Discord

We get a lot of DMs to the tune of 'Which course is actually worth the money?' 'Which cert to take first and how to study for it?' or 'How can I move from pentesting into AI security?' What to do when your boss hands you an AI system to secure and you have two weeks to figure it out. Where to even start with agents.

Good questions, all of them. But every answer we typed into a DM died there. One person saw it. The next person who asked the same thing got the same answer retyped a week later, usually worse because it was 11pm and we were tired.

So we built a Discord. Course and cert talk has its own channel. So does the "my company just threw AI at me and I have no idea what I am doing" conversation, which is way more common than people admit. The idea is simple: ask in public, get an answer that sticks around, and somebody who solved that exact problem last month can get to it before we do. We want to build a real community around this stuff, not just answer the same question in a hundred different inboxes.

It is early and it is small. That is the best time to show up.

What We Have Really Been Building

Everything above is real work and we are proud of it. But if we are being honest, the site updates are not the main thing we have been spending our time on. They are the foundation for it.

We are building something we have wanted to exist for a long time. It is the reason we did all of this in one push instead of spreading it out. We needed the platform ready because what is coming next needs a platform that can handle it.

We are not ready to showcase it just yet, but there is a teaser page on the site if you want a small peek. We are genuinely excited about this one. It is the most fun we have had building anything in a while, and when it drops, the Discord is where you will hear about it first.

Stay close and make sure to subscribe below to get the launch notification.