About AltaySec
AltaySec is a cybersecurity company that works on the security of the AI systems organisations build and use. We test these systems from an attacker's perspective, protect them in live traffic, and train the teams that use them.
- Founded
- 2025
- Headquarters
- Ankara, Türkiye
- Focus
- LLM, RAG and AI agent security
- Founders
- Fevzi Ege Yurtsevenler, Enes Deniz
What we do
Organisations are deploying chatbots, RAG pipelines and AI agents faster than their security practices can adapt. AltaySec was founded to close that gap, with the Turkish language context and KVKK obligations in view.
Penetration testing and red teaming
We test chatbots, RAG pipelines and AI agents for prompt injection, data leakage and unauthorised tool use under controlled conditions. Details are on the LLM penetration testing page.
Runtime protection
Guardian blocks attack attempts and masks personal data between an application and its model provider. Guardian Edge applies the same masking in employees' browsers. Both products are in a pilot programme.
Corporate training
Secure AI use training for all employees, and the hands-on LLM Security Bootcamp for technical teams.
Research
We publish guides, threat models, open datasets and technical reports. The English articles are on the research page.
Our assessments are based on the OWASP LLM Top 10 and MITRE ATLAS, and findings are linked to KVKK obligations.
Working principles
We follow the same principles in every client engagement and every publication.
Focus on one field
Our work centres on LLM application security, AI red teaming, runtime protection and security awareness training.
Research discipline
Our products and services draw on technical findings, open publications, datasets and applied laboratory work.
Local context
Independent expertise based in Türkiye. We account for the language, data and regulatory needs of Turkish organisations from the start.
Clear communication
We state scope, assumptions, limitations and evidence in writing, so that you can make informed security decisions.
Leadership
AltaySec was founded in 2025 by Fevzi Ege Yurtsevenler and Enes Deniz.
Fevzi Ege Yurtsevenler
Founder, AI security researcher
Works on LLM security, prompt injection, RAG, MCP and AI agent security, enterprise AI penetration testing and training. He has given in-person LLM security training at several organisations, including the Department of Computer Engineering at Gazi University.
He has contributed to the OWASP GenAI Security Project's GenAI Data Security Initiative and published a DOI-registered preprint on Zenodo. He took part in the Cyber Homeland Programme of Türkiye's Ministry of Industry and Technology and holds the BlueDot Impact "Future of AI" certificate.
Enes Deniz
Co-Founder, AI security specialist
One of the specialists who helped establish AI security as a technical field in Türkiye. He works across LLM application security, prompt-injection and jailbreak defence, AI agent and RAG security, AI red and blue teaming, security evaluation and defensive engineering.
Verifiable outputs of the work: accepted contributions to open-source projects, datasets and technical reports. They are listed on his open-source contributions and publications page.
Public Profiles
| Person | Accounts | |
|---|---|---|
| Fevzi Ege Yurtsevenler | LinkedIn, GitHub, ORCID | [email protected] |
| Enes Deniz | LinkedIn, GitHub, Hugging Face, Medium, ORCID, Crunchbase, Sessionize | [email protected] |
Education and community
Alongside our company work, we maintain free learning platforms, laboratories and open-source tools for students and teams learning cybersecurity.
Ecosystem
Platforms such as the academy, labs, glossary and practice arena are free to use. The full list is on the ecosystem page.
Teams
The AltayCTF team represents AltaySec in international CTF competitions. See the AltayCTF site.
Open source
Tools we develop for agent plugins, guardrail measurement and Turkish personal data masking are published on GitHub.
Let's build a work plan for your AI systems
Tell us about the system you use and the risk you want assessed. We will decide together whether to start with testing, protection or training.