Resources

What we publish, and what we publish it for

Findings from our own engagements with the data and the method attached, the methodologies we run so you can hold us to them, and the tools we built because we kept needing them. One thing on this site sits behind a form, and it is marked as such.

• ResearchFeatured12 min read

  Identity-path analysis beats configuration scanning: 14 cloud estates reviewed

  In eleven of fourteen cloud reviews there was at least one path from a low-privilege identity to full account administrator. In none of them did a posture tool rank any individual step above medium, because individually none of them is above medium. Includes the method, the anonymised path shapes, and why filtering a findings list by reachability reduced one estate from 1,840 to 210 in a day.

  DO

  Daniel Okafor · 18 Sept 2026Read research
• ResearchFeatured9 min read

  A third of configured log sources deliver nothing: what we find during MDR onboarding

  Across managed detection onboardings, a median of 31% of configured log sources had never delivered a single event, and several more had stopped silently after a platform upgrade. Dashboards report configured status, not delivery. The method for checking is included and takes an afternoon.

  DO

  Daniel Okafor · 2 Jul 2026Read research