Clear Path Security
Endpoint security capabilities explained for decision makers
For most UK SMEs, the biggest cyber risk is not a dramatic, highly targeted attack. It is[…]
Creating incident response playbooks and runbooks
Incident response works best when the team is not trying to invent the process during a live[…]
Signing and verifying container images with Cosign and Sigstore
Container images are often treated as if they are trustworthy because they came from a known registry[…]
Hunting for scheduled task persistence using KQL in Sentinel
Scheduled tasks are a common Windows feature, but they are also a practical persistence mechanism for attackers.[…]
Scanning infrastructure as code with Checkov and tfsec in CI
Infrastructure as code has become the default way many engineering teams build cloud environments, and that changes[…]
Building Microsoft Sentinel analytics rules from MITRE ATT&CK techniques
Microsoft Sentinel can do a lot of heavy lifting for a small security team, but the value[…]
Integrating SAST, DAST, and SCA tools into CI pipelines
For UK SMEs building software, the question is rarely whether to automate security testing. The more useful[…]
Secure development practices for AI systems
AI systems are now being built into customer service, internal knowledge tools, decision support, and software products.[…]
Detection engineering fundamentals for SOC teams
Detection engineering is the discipline of turning attacker behaviour, business context, and available telemetry into reliable detections[…]
Secure software procurement requirements for suppliers
For many UK SMEs, software buying decisions are now security decisions. A poor choice can lead to[…]