The Rise of AI in Offensive Security
AI is changing how we conduct and defend against offensive security. ODS-Intrude and the future of automated red teaming.
Read more →
Blog
Research, field notes, and practical guidance across red team operations, penetration testing, authorised offensive security, and continuous validation with ODS-Intrude.
Incident Response Readiness: What Fails First in Real Incidents
An operational view of the topic with decision-ready recommendations for leadership and technical owners.
Read more →
Supply Chain Security: Beyond the SBOM
Software Bill of Materials are a start. Real supply chain security requires testing and validation. Here's what that looks like.
Read more →
How to Assess Third-Party Security Risk Without Slowing Delivery: 2025 Perspective
What this issue means in practice, where teams usually fail, and how to improve control reliability this cycle.
Read more →
Zero Trust and Offensive Security
Zero Trust architectures change how we think about defence. They also change how we test. Here's the overlap.
Read more →
Active Directory: The Attacker's Playground
AD misconfigurations enable lateral movement and privilege escalation. Here's what we find in every engagement.
Read more →
2024 Retrospective: Lessons from the Field
What we learned from engagements across 2024. Common themes, surprising findings, and what to prioritise in 2025.
Read more →
Security Governance Decisions That Improve Next-Year Delivery: 2024 Perspective
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →
Incident Response: Testing Your Readiness
Red team engagements don't just find vulnerabilities — they test whether your incident response works when it matters.
Read more →
Cloud Security: Shared Responsibility in Practice
The cloud provider secures the foundation. You secure your data. Here's what we find when testing cloud deployments.
Read more →
Post-Outage Resilience: What 2024 Availability Incidents Changed for Security Teams
What this issue means in practice, where teams usually fail, and how to improve control reliability this cycle.
Read more →
Social Engineering: The Human Factor
Technical controls can be bypassed by targeting people. Why social engineering remains a core red team capability.
Read more →