Clear Path Security
Testing systems for high load and denial-of-service conditions
Why high-load and denial-of-service testing belongs in security architecture Availability is a security property. If a service[…]
Building SIEM detections using Sigma rules
Building SIEM detections using Sigma rules For many UK SMEs, the challenge is not collecting logs. It[…]
Secure decommissioning and data destruction practices for UK SMEs
Secure decommissioning and data destruction practices for UK SMEs Decommissioning is often treated as an IT tidy-up[…]
Implementing OWASP ASVS controls across application tiers
Implementing OWASP ASVS controls across application tiers OWASP ASVS, the Application Security Verification Standard, is one of[…]
Measuring detection quality and false positives for technical teams
Measuring detection quality and false positives for technical teams Security teams often talk about alert volume, but[…]
Threat modelling LLM systems for prompt injection
Threat modelling LLM systems for prompt injection Large language models have moved quickly from experimentation into real[…]
Ensuring systems are resilient to both attack and failure
Ensuring systems are resilient to both attack and failure For many UK SMEs, resilience is still treated[…]
Detecting command-and-control traffic at the network layer: a practical guide for UK SMEs
Detecting command-and-control traffic at the network layer: a practical guide for UK SMEs Command-and-control traffic, often shortened[…]
Network reconnaissance using Nmap safely and ethically
Network reconnaissance using Nmap safely and ethically Network reconnaissance is one of the most useful parts of[…]
Embedding security into CI/CD pipelines without slowing teams
Why security in delivery pipelines matters for SMEs For many UK SMEs, software delivery is a balancing[…]