01
The Enterprise Security Visibility Crisis
Why organisations with twenty security tools still don't know where their real risk lies — and the Enterprise Security Correlation Model (ESCM) that fixes it.
02
Why Vulnerability Prioritisation is Broken
Beyond CVSS: EPSS, KEV, reachability, business criticality and compensating controls — with a scoring model you can run in a spreadsheet, and ten findings ranked twice so the disagreement is visible.
03
Building an Enterprise Security Correlation Platform
The architecture paper: entity model, identity resolution, deduplication, multi-tenant isolation enforced in PostgreSQL, audit and erasure, API design — including the design mistakes we made and the tests that caught them.
04
Threat Modeling Beyond Design
From a design-time workshop to continuous threat modelling correlated with production reality and runtime risk.
05
AI in Enterprise Security: Practical Use Cases and Limitations
Where AI genuinely helps, where it produces confident nonsense, and where a human must stay in the loop. Written to be useful to a sceptic.
06
Executive Guide to Cyber Risk Measurement
Risk, exposure, likelihood, impact and business services — expressed as metrics a board can act on and an auditor can trace.
07
Continuous Threat Modeling for Modern Enterprises
Implementing CTEM without repeating Gartner: what to run each week, who does it, and what to measure — with worked examples.
08
The Modern Security Architecture Reference Model
A reference architecture for enterprise security data: sources, semantics, stores, and the decisions each layer must support.
What these are for
Most vendor whitepapers are a product brochure with footnotes. These are written the other way round: the argument stands on its own, the product appears in the final section, and you can stop reading before it without losing the point.
If a paper here changes how your team prioritises next quarter and you never speak to us, that is a reasonable outcome. If it makes you want to test our claims against your own estate, better still — bring your hardest question.