Amit StrausMaking security research watchable
Launch comms for PromptFiction, Oasis security research into prompt injection. A vulnerability disclosure turned into a 43-second vertical explainer, plus an amplification kit so the whole company could share it accurately.
My role: Launch comms: video production and the amplification kit.
The problem
Vulnerability research is normally consumed by other researchers and almost nobody else. This finding, that a single crafted link could make an AI desktop app act without any review or approval step, mattered to far more people than would ever read the technical write-up.
What I did
- Produced a 43-second vertical explainer with captions and motion graphics, cut for social feeds rather than for a conference talk.
- Led with the takeaway a normal person can act on: review links that open desktop apps.
- Built an amplification kit so employees could share the research accurately in their own words.
What changed
- A disclosure people could understand in under a minute, whether or not they read security research.
- A reusable pattern for research launches: the write-up for researchers, the video for everyone else.
What I took from it
The research is the substance, but the format decides who benefits from it. Forty-three seconds of plain language carries a disclosure past the security community to the people actually clicking the links.