Insider Risk Starts With Access Drift, Not Intent
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →
Blog
Research, field notes, and practical guidance across red team operations, penetration testing, authorised offensive security, and continuous validation with ODS-Intrude.
Incident Response Readiness: What Fails First in Real Incidents
What this issue means in practice, where teams usually fail, and how to improve control reliability this cycle.
Read more →
ODS invests in WebARX
WebARX is an Estonian company specialized in web security. Its main activity focuses on the development of a web security platform that includes WAF technology, and different security monitoring capabilities for web...
Read more →
How to Assess Third-Party Security Risk Without Slowing Delivery
What this issue means in practice, where teams usually fail, and how to improve control reliability this cycle.
Read more →
Identity Security Mistakes That Create Preventable Breaches: 2019 Perspective
Practical implementation guidance, key risks to monitor, and clear actions for security and delivery teams.
Read more →
What Security Leaders Should Prioritise at the Start of the Year: 2019 Perspective
Practical implementation guidance, key risks to monitor, and clear actions for security and delivery teams.
Read more →
Year-End Security Reviews That Actually Reduce Risk
An operational view of the topic with decision-ready recommendations for leadership and technical owners.
Read more →
Marriott Breach Lessons: Data Estate Visibility and Long-Dwell Risk
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →
Serious vulnerability in CloudFlare allows its WAF to be rendered useless
IMPORTANT: This vulnerability directly affects the websites of companies and users. Therefore, before making the vulnerability public, as well as this article that describes it, we have made a report responsibly,...
Read more →
Magecart-Style Web Skimming: Payment Flow Security That Holds Under Pressure
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →
Ransomware Continuity Planning for High-Pressure Periods
What this issue means in practice, where teams usually fail, and how to improve control reliability this cycle.
Read more →
Social Engineering Pressure Tests for Summer Operations
Actionable security guidance with concrete control priorities, assurance signals, and remediation sequencing.
Read more →