Insights
Field notes, not thought leadership.
Short pieces written by the engineers doing the work — what actually goes wrong, what actually fixes it, and the things vendors would rather not put in a datasheet.
Photography
A red pen over a printed page
Close crop of one hand holding a red pen above a printed page, mid-annotation. Bare pale surface, nothing else in frame. The pen is the only colour.
2400×1350 · WebP · <350KB
Latest
What a penetration test report should actually tell you
Most reports are a scanner export with a logo on it. Here is what to demand instead — and how to tell in ten minutes whether you were sold real testing.
Read more
The backup you have never tested is not a backup
If an attacker with domain admin can delete your backups, you do not have backups. You have copies.
Resilience · July 29, 2026
6 min read
Why your DLP gets switched off in month three
Nobody escalates a missed detection. Everybody escalates a blocked invoice.
Data Protection · July 11, 2026
6 min read
Reading an alert at 3am: what good triage actually looks like
A login is not an incident. A login plus a new forwarding rule is a breach in progress with a fifteen-minute head start.
Operations · June 23, 2026
8 min read
Insights
Want this applied to your environment?
Thirty minutes with the engineer who wrote it. No deck, no obligation.