Clear Path Security
Common web application security risks every SME should understand
For many UK SMEs, a web application is not just a website. It is the place customers[…]
Detecting OAuth consent phishing in Microsoft 365 audit logs
OAuth consent phishing is a practical identity attack that abuses the trust users place in application consent[…]
Risks of hard-coded secrets in software
Risks of hard-coded secrets in software For many UK SMEs, software is now part of day-to-day business[…]
Purple-team validation of detections against MITRE ATT&CK
Purple-team validation is the practical bridge between a threat model and a detection that actually works in[…]
Why immutable backups are critical for ransomware resilience
For most UK SMEs, the real cost of ransomware is not just the ransom demand. It is[…]
Baselining and detecting anomalous PowerShell with script block logging
PowerShell is one of the most useful administrative tools in Windows environments, which is exactly why it[…]
Detecting and mitigating indirect prompt injection in RAG pipelines
Retrieval-augmented generation, or RAG, is attractive because it lets a large language model answer from your own[…]
Reducing PCI DSS scope effectively: practical steps for UK SMEs
Reducing PCI DSS scope effectively: practical steps for UK SMEs If your business takes card payments, PCI[…]
Mapping NIST CSF to ISO 27001 in practice
Mapping NIST CSF to ISO 27001 in practice For many UK SMEs, NIST CSF and ISO 27001[…]
Automated response and SOAR design patterns for security teams
Security teams often reach a point where alerts are arriving faster than people can triage them. At[…]