Clear Path Security
Detecting hardcoded secrets with Gitleaks in pre-commit hooks
Hardcoded secrets still show up in otherwise mature engineering teams. API keys, cloud credentials, service account tokens,[…]
Hardening GitHub Actions against pwn requests and token theft
GitHub Actions is a useful automation layer for build, test, release, and operational tasks, but it also[…]
Understanding detection coverage and blind spots for UK SMEs
For many UK SMEs, the real question is not whether you have security tools in place, but[…]
AI supplier assurance and governance expectations for UK SMEs
For many UK SMEs, the biggest risk with artificial intelligence is not whether the tool looks impressive[…]
Using OWASP SAMM to measure secure development maturity
For many UK SMEs, secure development starts with a familiar pattern: a few coding standards, some security[…]
Principle of least privilege explained in plain English
If a staff account, supplier login, or application account has more access than it needs, the business[…]
Data protection through encryption and secure channels for UK SMEs
Key takeaways Start with the data that would hurt most if exposed, then apply encryption where it[…]
Detecting DCSync attacks using directory replication event logs
DCSync is one of the more important identity abuse techniques to understand if you run Active Directory.[…]
Supply chain attack modelling using MITRE ATT&CK
Supply chain risk is often discussed as a supplier problem, but for security teams it is better[…]
Benefits of automated response in cyber security
For many UK SMEs, the real cost of a cyber incident is not just the security issue[…]