CASE STUDY
May 17, 2026
NEXUM-004 on a real spec: how a public MCP storefront closed an IdempotencyMissing finding in a day
Fabian Williams built a public, MCP-callable storefront and walked it through Nexum's rules by hand. One finding: a mutating tool with no Idempotency-Key. Here's the finding, why the runtime guards missed it, and the fix — shipped in a public PR.
Read the case study →
RESEARCH
May 14, 2026
We ran 2,608 public APIs through our calibration ruleset for AI agent risk. Here's what we found.
Over the past two weeks we ran every spec in the APIs.guru catalog through Nexum — 2,608 OpenAPI definitions covering everything from a major payments API to a major cloud infrastructure provider to a widely-used developer platform's REST API. The results were sobering.
Read the research →
COMPLIANCE
July 28, 2026
El AI Act se aplazó — pero el 2 de agosto de 2026 todavía importa
Si en las últimas semanas has visto contenido diciendo que "el AI Act entra en pleno vigor el 2 de agosto", tienes medio dato. La otra mitad es la que casi nadie está contando.
Leer el análisis →