Security Research
SECURITY
intel.
Field notes from the engagements we run. Deep technical write-ups on the techniques attackers use and how to defend against them. No vendor fluff.
LOG
Field notes from the engagements we run. Deep technical write-ups on the techniques attackers use and how to defend against them. No vendor fluff.
A practical walkthrough of every category in the OWASP Top 10 with real-world exploit examples and remediation guidance you can ship today.
Introspection leaks, batching attacks, BOLA via nested queries, alias amplification, and mutation tampering — the GraphQL-specific bugs that bypass REST-era defences.
How a single over-permissive role combined with a public Lambda repeatedly leads to full AWS compromise — with detection rules to catch it.
Requirement 11.4 in plain English — what your QSA expects, what counts as a qualified tester, segmentation testing scope, and how to choose a vendor.
Working through a specific finding? Book a free 30-minute call with one of our engineers.