Skip to content
Threat-Briefing Hub

The credibility engine, published.

The home of the firm’s research and recurring intelligence briefings, the single most powerful instrument a young security firm has for earning trust.

Featured researchOriginal analysis

AI-connected environments

The unseen
attack surface.

Where inherited trust becomes invisible exposure.
Read the research
Latest briefingsField intelligence
Regulation

DORA after implementation

What resilient operations look like once the compliance deadline becomes ordinary work.

Read
Threat briefing

Identity paths adversaries reuse

A field guide to the trusted routes that turn small credentials into material access.

Read
Perspective

Narrative is an attack surface

How reputation, ambiguity, and delayed response can amplify an otherwise contained event.

Read
Proof in the open

The rest of the site asserts. This page proves.

The rest of the site asserts. This page proves.

The Threat-Briefing Hub is the home of that demonstration, original technical research, responsibly-disclosed findings, practical guidance on the regulations that shape the client’s world, and recurring briefings on the threats forming on the horizon. It is, quite deliberately, the most strategically important page on the entire site.

Where the rest of the website asserts that the firm finds what others miss, the Briefing Hub proves it. One genuinely good piece of public research does more for a young firm’s credibility than an entire marketing site, because it replaces a claim with evidence.

Intelligence index

Research organised by the question it helps you answer.

Not a content feed. A working library of original analysis, regulatory interpretation, field observations, and practical defensive guidance.

All intelligenceResearchGuidesBriefings
Search the archive
ResearchUNKNOWN
SURFACE
Mapped from inherited trust
Research

The unseen attack surface

Why AI-connected applications inherit exposure that conventional inventory never records.

RegulationOperational resilience
IdentifyProtectDetectRespondRecoverVerify
Control maturityObserved continuously
Regulation

DORA after implementation

What resilient operations look like once the compliance deadline becomes ordinary work.

Practical guideRead the analysis
Threat briefingObserved route
IdentityWorkloadDataImpact
Threat briefing

Identity paths adversaries reuse

A field guide to the trusted routes that turn small credentials into material access.

Field briefingRead the analysis
PerspectiveSignal interpretation
Scattered signalContext restored
Perspective

Narrative is an attack surface

How reputation, ambiguity, and delayed response can amplify an otherwise contained event.

Coverage with purpose

Follow a discipline, not an algorithm.

The archive is structured around the persistent problems security leaders and defenders actually carry—not around whatever happens to be trending.

AI securityResearch and field notes on models, agents, data paths, and delegated authority.
European resiliencePractical guidance on DORA, NIS2, GDPR, and the controls behind the language.
Adversary methodsObserved behaviours, attack paths, and the weak signals that precede an incident.
Defense practiceOperational patterns for discovery, detection, response, data protection, and trust.
Publication system

The strongest thinking receives the clearest path to its audience.

Editorial clarity

Featured research

The firm’s strongest current work, given the prominence it deserves.

Editorial clarity

Tagged & searchable

Research, compliance guides, and briefings, filterable by category.

Audience continuity

Subscriptions

A way for the right audience to follow the firm’s thinking over time.

Audience continuity

Gated depth

Premium reports available to qualified clients, capturing genuine interest.

Recurring intelligence

Useful enough to keep. Restrained enough to open.

A concise briefing when there is something worth knowing: the threat, the context, and the defensive decision it changes.

Briefing sampleSignals forming this month

Identity inheritance · AI data paths · operational resilience

Technical intelligence only. Unsubscribe at any time.
Publishing discipline

Credibility requires more than a polished article.

EvidenceClaims trace back to observation

Research separates what is known, inferred, and recommended so confidence remains honest.

ResponsibilityDisclosure before attention

Affected parties receive the right opportunity to act before a finding becomes public material.

ContinuityAn archive that stays useful

Taxonomy, authorship, updates, and access remain dependable as the body of work grows.

Evidence over assertion

Follow the thinking. Replace the claim with evidence.

Explore current research or discuss the intelligence questions shaping your environment.