Home/Resources/Whitepapers

Library

Whitepapers

Written to be forwarded to your security architecture team, not to your inbox.

No forms. Every paper here is readable in full, in a browser, and printable to PDF from the page itself. We would rather you read the argument and disagree with it than trade your email address for a document you never open.

01

From Security Data to Security Intelligence

The business context imperative: turning raw findings into board-ready risk intelligence.

Available now Practitioner guide

02

Securing AI Infrastructure

Agents, models, vector stores and gateways — the estate nobody put on the inventory.

Available now AI security

04

Threat Modeling Beyond Design

From a design-time workshop to continuous threat modelling correlated with production reality and runtime risk.

In preparation

05

AI in Enterprise Security: Practical Use Cases and Limitations

Where AI genuinely helps, where it produces confident nonsense, and where a human must stay in the loop. Written to be useful to a sceptic.

In preparation

06

Executive Guide to Cyber Risk Measurement

Risk, exposure, likelihood, impact and business services — expressed as metrics a board can act on and an auditor can trace.

In preparationBoard-level

07

Continuous Threat Modeling for Modern Enterprises

Implementing CTEM without repeating Gartner: what to run each week, who does it, and what to measure — with worked examples.

In preparation

08

The Modern Security Architecture Reference Model

A reference architecture for enterprise security data: sources, semantics, stores, and the decisions each layer must support.

In preparation

What these are for

Most vendor whitepapers are a product brochure with footnotes. These are written the other way round: the argument stands on its own, the product appears in the final section, and you can stop reading before it without losing the point.

If a paper here changes how your team prioritises next quarter and you never speak to us, that is a reasonable outcome. If it makes you want to test our claims against your own estate, better still — bring your hardest question.