[email protected] LinkedIn
KVKK-focused · Türkiye-hosted deployment option · AI security
AltaySec Logo ALTAYSEC
AltaySec› About› Enes Deniz
Enes Deniz, Co-Founder of AltaySec and AI security specialist
CO-FOUNDER OF ALTAYSEC · AI SECURITY SPECIALIST

Enes Deniz

One of the specialists who helped establish AI security as a technical field in Türkiye. As Co-Founder of AltaySec and an AI Security Specialist, he works across LLM application security, prompt-injection and jailbreak defense, AI agent and RAG security, AI red and blue teaming, security evaluation, and defensive engineering.

AltaySec Expertise Enterprise Services Research LinkedIn Technical Evidence ORCID Contact
LLMLLM application security
INJECTIONPrompt injection and jailbreak defense
AGENT / RAGAuthorization, tool, memory, and retrieval security
RED / BLUEAdversarial testing and defensive validation
EVALUATIONSecurity evaluation and regression testing
ENGINEERINGSecure AI and supply-chain engineering

Biography

Enes Deniz is one of the specialists who helped establish AI security as a technical field in Türkiye. As Co-Founder of AltaySec and an AI Security Specialist, he assesses AI systems not only through model outputs, but across application architecture, data flows, retrieval, tool use, authorization, and operational layers.

His areas of expertise include LLM security, prompt-injection and jailbreak defense, AI agent and RAG security, AI red and blue teaming, AI security evaluation and regression testing, and secure AI engineering.

He connects product development, security evaluation, and defensive engineering within one security practice. His open-source contributions, datasets, and technical publications are verifiable outputs of this work; detailed records are linked from the technical evidence center.

At AltaySec, his work brings product development, security evaluation, defensive engineering, and open technical work into the same practice. His foundation in security operations, incident detection, and log analysis adds an operational defense perspective to prompt injection, jailbreak, and AI red and blue teaming.

Areas of Expertise and Responsibility

His expertise spans both AI attack surfaces and production defenses:

LLM SECURITY
LLM Security

Defining security boundaries for LLM-based products by assessing prompts, outputs, data flows, and application logic together.

PROMPT INJECTION · JAILBREAK
Prompt Injection & Jailbreak Defense

Testing direct and indirect injection surfaces and measuring model behavior, false positives, and layered defenses.

AGENT · RAG
AI Agent & RAG Security

Assessing authorization boundaries, tool use, memory, retrieval, tenant isolation, and indirect-injection risks.

RED TEAM · BLUE TEAM
AI Red & Blue Teaming

Connecting authorized adversarial testing with detection, monitoring, incident response, and defensive validation.

EVALUATION · REGRESSION
AI Security Evaluation & Regression Testing

Developing reproducible test scenarios, benign and attack boundaries, regression evidence, and measurable defense validation.

SECURE AI ENGINEERING
Secure AI Engineering

Designing threat models, provenance controls, secure defaults, software supply-chain safeguards, and production-ready controls.

Working Approach

LLM security cannot be reduced to one filter, one system prompt, or one test list. A defensible system must account for prompts, data sources, tool access, user intent, and the operational process around the model.

01 Map the attack surface

Identify where the model can be influenced, what data it can reach, and which tools or actions it is allowed to invoke.

02 Connect defense to operations

Controls belong not only around the model, but also in product logic, logging, approvals, training, and incident workflows.

03 Keep the result operable

Security only works when the teams responsible for the system can understand, maintain, and act on it.

Work Across the AltaySec Ecosystem

His role connects the product, research, education, open-source, and community sides of AltaySec:

Featured Work

Product Guardian

A security layer for LLM applications exposed to prompt injection, jailbreaks, sensitive-data leakage, and policy violations.

View the product Research LLM security research

Technical work on prompt injection, AI SOC operations, agent security, RAG security, and production defenses.

Browse the research Ecosystem AltaySec Academy, Workshop, and AI Hub

A shared structure for technical education, community work, practical tools, and accessible AI security resources.

Explore the ecosystem Open data · Turkish Turkish Conversation Prompt-Injection Dataset

An open Turkish LLM security dataset with 600 legitimate requests, 150 attacks, and matched boundary examples.

View the dataset Open data · English Agentic Prompt-Injection Boundary Pairs

1,200 English examples for studying the boundary between legitimate requests and attacks across agentic, RAG, tool-use, and enterprise workflows.

View on Hugging Face Interactive tool Turkish Prompt-Injection Dataset Explorer

A browser-based tool for reviewing legitimate requests, attack families, and matched boundary cases in the Turkish dataset.

Open the explorer

Selected AI Security Research

Selected technical research covers LLM and agent security, prompt-injection defense, RAG isolation, security regression, and privacy-preserving telemetry.

Research Series · #01 Bir AI Güvenlik Veri Seti Upstream’e Nasıl Hazırlanır?Şema, provenance, lisans, anonimleştirme, manifest ve duplicate kontrolleriyle bir AI güvenlik veri setini büyük bir açık kaynak projeye hazırlama rehberi. Turkish-language technical article. Read Research Series · #02 GenAI Sistem Keşfinde Dokuz Kategoriyle Kanıt ToplamaYetkili GenAI güvenlik testlerinde yetenek, araç, veri kaynağı, kimlik, politika, talimat, bellek, mimari ve provenance keşfini kanıta dönüştürme rehberi. Turkish-language technical article. Read Research Series · #03 AI Red Team Otomasyonunda Güvenilirlik MühendisliğiTimeout, target hata ayrıştırma, refusal-only yanlış alarm kontrolü, strict config, readiness, cleanup ve özel rapor izinleriyle güvenilir AI red-team otomasyonu. Turkish-language technical article. Read Research Series · #04 AI Engineering Envanteri: Modelden Önce Sistem HaritasıHosted AI, dış kaynaklı model ve model eğitme/uyarlama senaryolarında yaşam döngüsü artefaktlarını, sahipliği ve güvenlik giriş noktalarını haritalama rehberi. Turkish-language technical article. Read Research Series · #05 Agent Goal Integrity: Niyeti Tahmin Etmek Yerine Olay KaydetmekOpenAI Agents çalışmalarında goal-integrity regresyonu için niyeti çıktıdan tahmin etmek yerine açık ve deterministik goal event kaydetme yaklaşımı. Turkish-language technical article. Read Research Series · #06 LangGraph Update Stream’lerini Güvenlik Kanıtına DönüştürmekLangGraph stream_mode=updates akışında assistant mesajları ve tool çağrılarını opt-in, geriye uyumlu ve açık hata semantiğiyle güvenlik trace’ine dönüştürme. Turkish-language technical article. Read

Open the full research library

Technical Evidence and Open-Source Records

This section presents one verifiable output of the broader expertise and engineering work described above. Technical contributions merged into upstream projects are linked to pull requests, merge commits, and dates; detailed records remain in the dedicated evidence center.

ProjectMerge recordTechnical outcomeDate
GenAI Data Security InitiativeGenAI-Security-Project/GenAI-Data-Security-Initiative PR #11734a77f7a0ea Turkish-first AI security test corpus
GenAI Red Team LabGenAI-Security-Project/GenAI-Red-Team-Lab PR #50f41c8066cfaf System reconnaissance for authorized GenAI assessments
GenAI Red Team LabGenAI-Security-Project/GenAI-Red-Team-Lab PR #5197993e8237b0 Reliability hardening for reconnaissance results
OWASP AI ExchangeOWASP/www-project-ai-security-and-privacy-guide PR #187601d67e8eb02 AI engineering primer for security professionals
OWASP Agent Security Regression HarnessOWASP/Agent-Security-Regression-Harness PR #157798a8fc1b923 Explicit goal-event evidence for OpenAI Agents
OWASP Agent Security Regression HarnessOWASP/Agent-Security-Regression-Harness PR #1581d3cd7caf2dd Capturing LangGraph update streams as security evidence
Anchore Syftanchore/syft PR #510586baeeb481ce Correct Cargo PURL identity for local Rust packages

Open the problem → change → outcome records

Selected Publications and Technical Outputs

This selection represents the dataset, evaluation, agent-security, defensive-engineering, and applied-research dimensions of his AI security work.

Companion Report · DOI Security-Oriented AI EngineeringAn independent inventory-first companion to the live OWASP AI Exchange primer, connecting delivery models, lifecycle artifacts, ownership, and security evidence. It is not an OWASP publication or endorsement. v1.0.0 · CC BY 4.0. Zenodo Technical Report · DOI Framework-Aware Evidence CaptureAn independent report on explicit OpenAI Agents goal events and opt-in LangGraph update streams as inspectable evidence in agentic AI security regression testing. It documents merged PRs #157 and #158; it is not an OWASP publication or endorsement. v1.0.0 · CC BY 4.0. Zenodo Technical Report · DOI Reliable Bilingual System Reconnaissance for GenAI Red Teaming: Implementation and HardeningAn independent technical report documenting the implementation and hardening decisions behind PR #50 and PR #51, including evidence integrity and execution-state semantics. Focused regression checks and repository quality gates passed; the full Podman/Ollama gpt-oss:20b campaign was not run. v1.0.0 · CC BY 4.0. Zenodo Open Data · DOI Turkish Conversation Prompt-Injection Dataset750 Turkish examples, including 150 matched benign and attack boundary pairs across ten attack families. Zenodo Open Data · DOI Agentic Prompt-Injection Boundary Pairs1,200 English examples organized as 600 controlled benign and attack pairs across 50 agentic and enterprise scenarios. v1.0.0 · DOI 10.5281/zenodo.21378693. Zenodo Medium · English AI Security Needs More Than English TestsWhat 300 Turkish-first cases reveal about label scope, provenance, and evidence in multilingual AI-security evaluation. Read Medium · English When a Security Test Mistakes Failure for a FindingWhy transport failures, target-generated error envelopes, and refusal-only responses must be separated from genuine disclosure evidence in AI-security testing. Read Medium · English A Prompt-Injection Dataset Should Test Boundaries, Not KeywordsWhy useful prompt-injection datasets must test intent and authorization boundaries rather than reward keyword memorization. Read

Open all publications and research

Links

Frequently Asked Questions

Who is Enes Deniz?

Enes Deniz is one of the specialists who helped establish AI security as a technical field in Türkiye. As Co-Founder of AltaySec and an AI Security Specialist, he works across LLM application security, prompt-injection and jailbreak defense, AI agent and RAG security, AI red and blue teaming, security evaluation, and defensive engineering.

What open-source security work does Enes Deniz publish?

Enes Deniz publishes AI security datasets, technical reports, security evaluation tools, and upstream open-source contributions. The open source and technical publications page lists the relevant pull requests, merge commits, DOIs, and technical outcomes with direct sources.

Who founded AltaySec?

AltaySec was founded in 2025 by Fevzi Ege Yurtsevenler and Enes Deniz. The company brings together LLM security, AI red teaming, prompt-injection defense, products, research, education, open source, and community work.

What are Enes Deniz's areas of expertise?

His primary areas of expertise are LLM security, prompt injection and jailbreak defense, AI agent and RAG security, AI red and blue teaming, AI security evaluation and regression testing, and secure AI engineering.

What is Enes Deniz's role at AltaySec?

As Co-Founder of AltaySec, Enes Deniz works on AI security products, security evaluation, open research, and defensive engineering. He connects prompt injection, jailbreak defense, and AI red and blue teaming with enterprise security requirements.

How can I contact Enes Deniz?

Enes Deniz can be reached at [email protected], through LinkedIn, or through GitHub. Corporate inquiries should be sent to [email protected].

Has Enes Deniz published an open Turkish LLM security dataset?

Yes. The Turkish Conversation Prompt-Injection Dataset contains 750 unique Turkish examples: 600 legitimate user requests and 150 prompt-injection attacks. It is available on Hugging Face and GitHub.

Has Enes Deniz published an English prompt-injection dataset?

Yes. Agentic Prompt-Injection Boundary Pairs contains 1,200 English examples arranged as 600 controlled benign/attack pairs for agentic, RAG, and tool-using LLM systems.

Can the prompt-injection dataset be explored in a browser?

Yes. The Turkish Prompt-Injection Dataset Explorer provides a browser-based view of attack families, labels, and matched boundary examples without requiring code.

What is AI red and blue teaming?

AI red teaming tests LLM systems for prompt injection, jailbreaks, data leakage, and agent abuse. AI blue teaming builds the detection, monitoring, incident response, and defensive controls needed to reduce those risks.

Need a Practical LLM Security Roadmap?

AltaySec works with organizations on LLM security, AI red teaming, prompt-injection and jailbreak defense, enterprise training, and production security architecture.

Book a Consultation View Services