White papers
Guidance on what keeps going wrong
Longer pieces on the failures that recur across engagements, how they arise, why internal review misses them, and what actually closes them.
Forms that collect credentials you should never hold
Asking a customer for their password to another service is common, quietly catastrophic, and almost always avoidable. What goes wrong, why it survives internal review, and what to do instead.
Read it →
Investigating a suspected breach without confirming it
Most breach investigations begin with a theory. The ones that go wrong are the ones that set out to prove it. How to structure an investigation so the premise can fail, and why that is when the useful findings appear.
Read it →
These are free to read in full, with no form in the way. If one is useful and you want it applied to your own environment, get in touch.