Resources

What we publish, and what we publish it for

Findings from our own engagements with the data and the method attached, the methodologies we run so you can hold us to them, and the tools we built because we kept needing them. One thing on this site sits behind a form, and it is marked as such.

Showing 1 of 12 resources in guides.Clear filter

GuideFeaturedPDF, 38 pages
The secure SDLC field guide: moving findings earlier without slowing delivery
The threat-modelling workshop format, the decision-record review checklist, how to tune a pipeline gate to a finding budget delivery teams accept, and the cycle-time measurement that tells you whether any of it is working. 38 pages.
Sofia Marek · 3 Mar 2026Get the guide

The seven kinds of thing here

Research & Labs
Findings from our own work, with the data and the method.
2 itemsRead research
Methodologies
How we actually run an engagement, published so you can hold us to it.
2 itemsRead methodology
Open-source tools
Tools we use on engagements, released because they are more useful shared.
2 itemsView tool
Insights
Shorter pieces on things we keep having to explain.
4 itemsRead article
Datasheets
One page per service: scope, deliverables, timeline, team.
0 itemsDownload datasheet
Guides
Longer-form, and the only thing on this site behind a form.
1 item · behind a formGet the guide
Webinars
Recorded sessions, no registration wall on the recording.
1 itemWatch webinar

Buying questions — pricing, scoping, which thing to buy first — sit inside the service tree rather than here. Start at services.