Clear Path Security
MITRE ATT&CK Navigator: building a coverage heatmap step by step
MITRE ATT&CK Navigator is useful when you need to turn a long list of detections, controls, and[…]
DNP3 protocol security for utilities: secure authentication and monitoring
DNP3 remains a common protocol in utility environments because it is efficient, widely supported, and well suited[…]
Prompt injection attacks explained with real examples and defences
Prompt injection is one of the most important security issues to understand when you are deploying large[…]
NHS DSPT explained for suppliers
If your business supplies goods or services to the NHS, the NHS Data Security and Protection Toolkit,[…]
AI red teaming methodology for customer-facing chatbots
Customer-facing chatbots are now doing more than answering simple questions. In many organisations they sit in front[…]
Integrating Trivy vulnerability and misconfiguration scanning into GitHub Actions
For UK SMEs building software, the question is rarely whether to add security scanning to CI. It[…]
Microsoft Secure Development Lifecycle explained for UK SMEs
If your business builds software, commissions it, or relies on a digital product to serve customers, security[…]
Designing log pipelines for detection engineering
Detection engineering only works when the underlying log pipeline is designed to support it. If telemetry arrives[…]
Zero Trust adoption challenges for SMEs
For many UK SMEs, Zero Trust sounds sensible in principle. The business case is straightforward: reduce the[…]
Preventing secret leakage in CI/CD environments
Secrets leakage in CI/CD environments is rarely caused by one dramatic failure. More often, it is the[…]