Resources

What we publish, and what we publish it for

Findings from our own engagements with the data and the method attached, the methodologies we run so you can hold us to them, and the tools we built because we kept needing them. One thing on this site sits behind a form, and it is marked as such.

Showing 2 of 12 resources in open-source tools.Clear filter

Open-source toolFeaturedGitHub
trustgraph — enumerate every privilege path in an AWS organisation
Reads actual IAM policy documents, trust relationships, permission boundaries and SCPs rather than the console summary, and outputs the reachability graph as queryable data. Runs from a read-only role you create and can delete. MIT, no telemetry, no account required.
Daniel Okafor · 30 May 2026View tool
Open-source toolGitHub
logsource-check — prove your log sources are actually delivering
Compares configured sources against events actually received over a window, per source and per host, for Sentinel, Elastic and Wazuh. Written because we kept finding dead sources by hand on onboarding. MIT.
Daniel Okafor · 2 Jul 2026View tool

The seven kinds of thing here

Research & Labs
Findings from our own work, with the data and the method.
2 itemsRead research
Methodologies
How we actually run an engagement, published so you can hold us to it.
2 itemsRead methodology
Open-source tools
Tools we use on engagements, released because they are more useful shared.
2 itemsView tool
Insights
Shorter pieces on things we keep having to explain.
4 itemsRead article
Datasheets
One page per service: scope, deliverables, timeline, team.
0 itemsDownload datasheet
Guides
Longer-form, and the only thing on this site behind a form.
1 item · behind a formGet the guide
Webinars
Recorded sessions, no registration wall on the recording.
1 itemWatch webinar

Buying questions — pricing, scoping, which thing to buy first — sit inside the service tree rather than here. Start at services.