Arcanum releases SpikeStrip for AI web defense

Researchers at Arcanum have released SpikeStrip, an open-source tool designed to defend web applications against AI pentesting agents by embedding decoy instructions, math traps, and fake vulnerability leads into HTML comments and JavaScript. The tool aims to waste attackers' compute resources while functioning as a canary token for AI activity when an agent attempts to access the decoy paths. While it does not stop agents that treat target content as untrusted data, the authors argue that detection and resource exhaustion are primary benefits. Open article →