Original thinking, observations, and patterns from real engagements.
Anonymized studies from real tests. What happened, how we got in, what we learned.
Technical notes, observations, security myths that need debunking.
Longer analyses, conceptual papers, independent research.
Read my blog posts or explore my areas of expertise.