Home/Writing
Writing
Notes from the engagements.
Practical writing on offensive security: what we keep finding, what buyers keep overpaying for, and how to tell a useful report from an expensive one. No news roundups, no vendor commentary.
Guidance · Buying testing
Your first penetration test should be smaller than you think
The instinct is to test everything at once. It produces a long report, a large invoice, and a remediation backlog nobody finishes. Here is what to buy instead, and why the narrower engagement usually tells you more.
Read the article7 minReading time
GuidanceFor first-time buyers
Craft · Reporting
The anatomy of a finding worth paying for
Most findings fail at the same step, and it is not the technical one. A short guide to what separates a write-up an engineer can act on from one that gets filed and forgotten.
Read the article
Subscribe
We publish when we have something worth saying
Roughly monthly, drawn from real engagements rather than the news cycle. If you want a specific topic covered, tell us and we will put it in the queue.
Suggest a topic