We can create an information security strategy tailored to your business needs, based on a mini-audit and series of interviews with company management. Our security strategies provide practical guidance on what needs to be done to improve your information security posture, as well as which policies, procedures and products are worth trying as pilot projects.
We make sense of penetration test results, and turn them into an actionable plan that meets your company's priorities.
We provide security reviews of projects and product architecture so you can make the necessary changes.
We mentor your local information security and IT teams to help them better understand security.
Our advanced information security topics provide you with the insight you need to make informed decisions.
Published Nov 16, 2023
Discover our new adversary model for cyber defense, focusing on one key aspect: adversary capability levels – from amateurs to government-backed APTs. It might be the only one you would ever need! Stay tuned for application examples.
Published Nov 2, 2023
Frustratingly, the security pop culture keeps ignoring the elephant in the room — the elephant academic researchers are pretty well aware of. Namely: there is no such thing as a password you can blame and sacrifice for the user’s sins. Not anymore. And whatever exists, it is not something with consistent security properties, not on the web at least.
Published Sep 18, 2023
A gazillion of trainings is out there, but the ugly truth is simple: since bulk email senders as a service took over, you can not. You can if it is really stupid, but if it is smart, no chance. Legitimate emails are just as suspicious now