White papers
Guidance on what keeps going wrong
Longer pieces on the failures that recur across engagements, how they arise, why internal review misses them, and what actually closes them.
White paper WP-01
Forms that collect credentials you should never hold
Asking a customer for their password to another service is common, quietly catastrophic, and almost always avoidable. What goes wrong, why it survives internal review, and what to do instead.
For product owners, operations teams, and anyone who has ever built a form to make an internal process easier.
Read the full paper
White paper WP-02
Investigating a suspected breach without confirming it
Most breach investigations begin with a theory. The ones that go wrong are the ones that set out to prove it. How to structure an investigation so the premise can fail, and why that is when the useful findings appear.
For founders, operations leads and technical teams responding to something that looks like a compromise.
Read the full paper
These are free to read in full, with no gate in front of them, and each one prints cleanly or saves as a PDF from the page. If one is useful and you want it applied to your own environment, get in touch.