Research: five reproducible models published
We published five research posts with the code behind them: exposure windows, attack-path remediation, ASR statistics, SOC queueing and base rates in triage.
Notes
Changelog and field notes. Also in the Atom feed.
Learn hub: compliance, glossary and templates
New reference pages for PCI DSS 11.4, DORA TLPT, NIS2 reporting and SEC Item 1.05, plus a rules-of-engagement template and an incident response checklist.
Rogue/AI: MCP server inventory
Rogue/AI now enumerates MCP servers connected to in-scope agents and tests tool descriptions and schemas for tool poisoning before attacking the agent itself.
Guides published
Five field guides for security leaders, starting with autonomous penetration testing.