Security blog

Security insights for business leaders and technical teams.

Two kinds of articles. Clear, practical guides for decision-makers who need to understand and manage their cyber risk. And technical deep dives for developers, sysadmins and security practitioners. Both written from real audits.

Latest articles

Fresh from the field

Want me to look at your setup instead?

Articles are a start. A free 30-minute call tells you what to test first in your own environment.