<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Ghost Protocol Blog</title>
    <link>https://ghosts.lk/blog</link>
    <description>Security engineering, AI memory, penetration testing and case studies from Ghost Protocol, Colombo.</description>
    <language>en-us</language>
    <lastBuildDate>Sat, 24 Oct 2026 00:00:00 GMT</lastBuildDate>
    <atom:link href="https://ghosts.lk/blog/rss.xml" rel="self" type="application/rss+xml" />

    <item>
      <title>Ghost Protocol joins the NVIDIA Inception Program</title>
      <link>https://ghosts.lk/blog/ghost-protocol-joins-nvidia-inception</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/ghost-protocol-joins-nvidia-inception</guid>
      <pubDate>Fri, 10 Jul 2026 00:00:00 GMT</pubDate>
      <description>Ghost Protocol joined the NVIDIA Inception program in July 2026. What the program is, and what membership changes for our clients on NVIDIA hardware.</description>
    </item>

    <item>
      <title>How much does a penetration test cost? (2026 prices)</title>
      <link>https://ghosts.lk/blog/penetration-testing-cost</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/penetration-testing-cost</guid>
      <pubDate>Sat, 04 Jul 2026 00:00:00 GMT</pubDate>
      <description>Published 2026 guides put a web app pentest at $5,000 to $35,000+. Ours is $4,000 fixed. Every cost driver, pricing model, and hidden fee, with real numbers.</description>
    </item>

    <item>
      <title>Penetration testing vs vulnerability scanning: we ran both</title>
      <link>https://ghosts.lk/blog/penetration-testing-vs-vulnerability-scanning</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/penetration-testing-vs-vulnerability-scanning</guid>
      <pubDate>Sat, 04 Jul 2026 00:00:00 GMT</pubDate>
      <description>A scan finds possible vulnerabilities. A pentest proves what an attacker can do. We ran 75 scanners on our own app; here is what each method caught.</description>
    </item>

    <item>
      <title>Your first penetration test: unblocking enterprise deals</title>
      <link>https://ghosts.lk/blog/first-penetration-test-startup</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/first-penetration-test-startup</guid>
      <pubDate>Sat, 04 Jul 2026 00:00:00 GMT</pubDate>
      <description>An enterprise prospect asked for pentest evidence. The five triggers, what security questionnaires ask, what to send, and how startups unblock the deal in days.</description>
    </item>

    <item>
      <title>VAPT in Sri Lanka: an honest buyer&apos;s guide | Ghost Protocol</title>
      <link>https://ghosts.lk/blog/vapt-sri-lanka-guide</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/vapt-sri-lanka-guide</guid>
      <pubDate>Sat, 04 Jul 2026 00:00:00 GMT</pubDate>
      <description>What VAPT costs in Sri Lanka, how to spot a scanner report sold as a pentest, what the PDPA actually requires, and 10 questions to ask any VAPT provider.</description>
    </item>

    <item>
      <title>AI penetration testing vs human pentesters | Ghost Protocol</title>
      <link>https://ghosts.lk/blog/ai-penetration-testing-vs-manual</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/ai-penetration-testing-vs-manual</guid>
      <pubDate>Sat, 04 Jul 2026 00:00:00 GMT</pubDate>
      <description>What AI pentest tools catch and what they miss in 2026: coverage vs business logic, real examples from our 75-scanner run, and the economics of hybrid testing.</description>
    </item>

    <item>
      <title>Memory is not the moat, judgment is | Ghost Protocol</title>
      <link>https://ghosts.lk/blog/case-study-memory-not-the-moat</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/case-study-memory-not-the-moat</guid>
      <pubDate>Thu, 02 Jul 2026 00:00:00 GMT</pubDate>
      <description>Two AI agents, the same desk, comparable models. One checked itself before acting, one did not. A field note on agent reliability, grounded in 25 sources.</description>
    </item>

    <item>
      <title>One operator, thirteen projects, zero dropped context</title>
      <link>https://ghosts.lk/blog/case-study-wyrm-operator</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/case-study-wyrm-operator</guid>
      <pubDate>Wed, 24 Jun 2026 00:00:00 GMT</pubDate>
      <description>How a forward-deployed operator runs a dozen-plus workstreams at once with Wyrm as persistent memory under Claude. Real usage: 77 sessions, 13 projects.</description>
    </item>

    <item>
      <title>How we digitized a traditional restaurant in 2 weeks</title>
      <link>https://ghosts.lk/blog/case-study-upalis-restaurant</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/case-study-upalis-restaurant</guid>
      <pubDate>Sat, 25 Jan 2025 00:00:00 GMT</pubDate>
      <description>From pen-and-paper orders to a full online platform, the Upalis story. 103+ menu items, zero commission, custom-built from scratch.</description>
    </item>

    <item>
      <title>Why your AI forgets everything (and how Wyrm fixes it)</title>
      <link>https://ghosts.lk/blog/why-your-ai-forgets-everything</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/why-your-ai-forgets-everything</guid>
      <pubDate>Wed, 22 Jan 2025 00:00:00 GMT</pubDate>
      <description>AI assistants lose all context between sessions. Learn how MCP servers and persistent AI memory like Wyrm solve the context window problem for developers.</description>
    </item>

    <item>
      <title>75 scanners against my own app: what broke | Ghost Protocol</title>
      <link>https://ghosts.lk/blog/75-scanners-against-my-app</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/75-scanners-against-my-app</guid>
      <pubDate>Mon, 20 Jan 2025 00:00:00 GMT</pubDate>
      <description>Most companies test with 1-2 scanners. We built an AI that orchestrates 75. Here&apos;s what a 17-phase automated penetration test actually finds.</description>
    </item>

    <item>
      <title>The real cost of a data breach for small businesses</title>
      <link>https://ghosts.lk/blog/real-cost-of-data-breach</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/real-cost-of-data-breach</guid>
      <pubDate>Sat, 18 Jan 2025 00:00:00 GMT</pubDate>
      <description>IBM&apos;s 2026 report puts the average data breach at $4.99 million. For a small business, one breach can mean closing the doors. What a breach really costs.</description>
    </item>

    <item>
      <title>Why your web app needs a penetration test before launch</title>
      <link>https://ghosts.lk/blog/penetration-testing-before-launch</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/penetration-testing-before-launch</guid>
      <pubDate>Wed, 15 Jan 2025 00:00:00 GMT</pubDate>
      <description>Most teams skip security testing until it is too late. How automated penetration testing catches OWASP Top 10 vulnerabilities before attackers do.</description>
    </item>

    <item>
      <title>Building AI memory systems: lessons from Wyrm</title>
      <link>https://ghosts.lk/blog/building-ai-memory-systems</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/building-ai-memory-systems</guid>
      <pubDate>Wed, 08 Jan 2025 00:00:00 GMT</pubDate>
      <description>How we built a persistent AI memory system that compounds knowledge across 15+ projects, and why every engineering team needs one.</description>
    </item>

    <item>
      <title>The true cost of technical debt in restaurant platforms</title>
      <link>https://ghosts.lk/blog/technical-debt-restaurant-platforms</link>
      <guid isPermaLink="true">https://ghosts.lk/blog/technical-debt-restaurant-platforms</guid>
      <pubDate>Fri, 20 Dec 2024 00:00:00 GMT</pubDate>
      <description>We replaced 4 disconnected systems with one unified platform. Here&apos;s the math on why rebuilding saved a restaurant money over the long term.</description>
    </item>
  </channel>
</rss>