Clear Path Security
IEC 62443-4-1 secure product development lifecycle for OT vendors
For OT vendors, IEC 62443-4-1 is best understood as a secure product development lifecycle standard. It is[…]
Guardrail and jailbreak testing for customer-facing chatbots
Guardrail testing checks that a chatbot refuses what it should refuse and stays inside its brief; jailbreak[…]
Testing web APIs for broken object level authorisation (BOLA)
Broken object level authorisation, usually shortened to BOLA, is one of the most common API security issues[…]
Simulating adversary techniques safely with Atomic Red Team
Atomic Red Team is an open-source library of small, scripted tests, each mapped to a MITRE ATT&CK[…]
Enumerating Active Directory attack paths with BloodHound and SharpHound
Active Directory remains one of the most important identity systems in many UK SME environments, which also[…]
Designing microsegmentation with Azure network security groups
Microsegmentation is the practice of breaking a network into smaller trust zones so that workloads can only[…]
Monitoring OT protocols such as Modbus and DNP3 for anomalies
Monitoring operational technology traffic is different from watching a normal office network. In an OT environment, the[…]
Implementing Entra ID Conditional Access policies as code
Conditional Access is one of the most effective control points in Microsoft Entra ID, but it becomes[…]
Measuring detection coverage against MITRE ATT&CK using DeTT&CT
Detection teams often talk about alert volume, false positives, and mean time to respond. Those are important,[…]
Writing Sigma correlation rules for multi-stage attack detection
Single-event detections are useful, but many real intrusions only become meaningful when you connect several low-signal actions[…]