Resources
Notes from assessment, implementation and testing work: what we find, why it keeps recurring, and what to do about it.
3 articles
Conditional Access is the control that turns a Microsoft 365 licence into an access policy. Most tenants run a fraction of what they are entitled to, and the gaps are consistent enough to be worth listing.
A penetration test is only as useful as the report that comes out of it. Here is what a report should contain, and how to tell a genuine test from an exported scanner run.
Cloud assessments across different platforms and different organisations tend to surface the same small set of issues. They are worth checking before anyone runs a formal review.
Tell us what you are trying to protect and what has changed recently. We will tell you what we would look at first, and whether we are the right people for it.
