Skip to content

Resources

Research & Labs

Findings from our own work, with the data and the method.

Showing 2 of 2 items — 2 still being written, and each one says so on its own page.

  • ResearchFeatured12 min read

    Identity-path analysis beats configuration scanning: 14 cloud estates reviewed

    In eleven of fourteen cloud reviews there was at least one path from a low-privilege identity to full account administrator. In none of them did a posture tool rank any individual step above medium, because individually none of them is above medium. Includes the method, the anonymised path shapes, and why filtering a findings list by reachability reduced one estate from 1,840 to 210 in a day.

    Daniel Okafor · Read research
  • ResearchFeatured9 min read

    A third of configured log sources deliver nothing: what we find during MDR onboarding

    Across managed detection onboardings, a median of 31% of configured log sources had never delivered a single event, and several more had stopped silently after a platform upgrade. Dashboards report configured status, not delivery. The method for checking is included and takes an afternoon.

    Daniel Okafor · Read research