ResearchPlanned
Attack paths in multi-account cloud estates
Why most cloud attack paths depend on an over-permissive role rather than a software vulnerability — and how to find them.
9 min read
Insights
Research from the delivery floor
Everything we publish comes from work we have done. No vendor sponsorship, no recycled survey data.
Placeholder — the articles below are planned editorial topics. Publication dates and full texts will follow once ASNC signs off the research.
Field guidePlanned
Building a cryptographic bill of materials
A practical discovery approach for algorithms, keys and certificates — the prerequisite for any credible post-quantum plan.
12 min read
RegulationPlanned
DORA resilience testing: what auditors actually ask
The resilience-testing evidence gaps that surface most often in financial-entity readiness work.
7 min read
DetectionPlanned
Detection-as-code without drowning the SOC
How to version, test and retire detections so coverage improves while alert volume falls.
10 min read
IdentityPlanned
Retiring standing admin access in ninety days
A sequencing model for just-in-time elevation that avoids the operational revolt most PAM rollouts trigger.
8 min read
OT securityPlanned
Segmenting plant networks that cannot stop
Enforcement strategies for environments where a misapplied policy halts production lines.
11 min read
Briefings
Quarterly threat briefing
A private quarterly briefing for engagement clients covering adversary activity relevant to their sector, mapped to MITRE ATT&CK with detection content included. Ask us about availability.
Want the research applied to your estate?
Request an assessment and we will map these findings against your own cloud, identity and network architecture.