We can create an information security strategy tailored to your business needs, based on a mini-audit and series of interviews with company management. Our security strategies provide practical guidance on what needs to be done to improve your information security posture, as well as which policies, procedures and products are worth trying as pilot projects.
We make sense of penetration test results, and turn them into an actionable plan that meets your company's priorities.
We provide security reviews of projects and product architecture so you can make the necessary changes.
We mentor your local information security and IT teams to help them better understand security.
Our advanced information security topics provide you with the insight you need to make informed decisions.
Published Oct 7, 2025
Some services still rock it like it is 1995. Sorry, today it is just silly. No one wants one more set of credentials to manage. It is not about security, it is about usability. Your preferred methods should be: Low security: magic links. Medium security: social network login High security: fido2 on physical tokens
Published Nov 16, 2023
Discover our new adversary model for cyber defense, focusing on one key aspect: adversary capability levels – from amateurs to government-backed APTs. It might be the only one you would ever need! Stay tuned for application examples.
Published Nov 2, 2023
Frustratingly, the security pop culture keeps ignoring the elephant in the room — the elephant academic researchers are pretty well aware of. Namely: there is no such thing as a password you can blame and sacrifice for the user’s sins. Not anymore. And whatever exists, it is not something with consistent security properties, not on the web at least.