RESOURCES · BLOG
SDP v3.0 demotes single packet authorisation from definition to option. What the new guide actually changed, why SPA struggles on IoT and cloud functions, where the line between SDP and microsegmentation really falls, and what to do first.
What CISA’s exploited-vulnerability catalogue says about VPN vulnerabilities: how many in six years, why patching starts late, and what a patch cannot undo.
A software-defined perimeter puts the boundary at each resource: three roles, why single packet authorisation leaves scanners no reply, and what it misses.
What an attack surface inventory answers: how one domain name becomes a target list, the six exposed assets most inventories miss, and what to do with each item you find.
Every stage of the ransomware attack chain: how initial access happens, how it spreads, why backups do not stop extortion, and which link is cheapest to break.
What actually decides a VPN replacement: what to inventory, how to run the parallel period, which services move first, how to verify the old endpoint is gone.
How red team engagements and penetration testing differ in goal, scope, duration and deliverable, which one fits your situation, and where scoping goes wrong.
For the people who sign off the budget rather than build the systems: what zero trust solves, how it differs from what came before, what it is worth, and what to ask your IT team.
Plane separation, certificate identity, layered encryption, per-connection authorisation and the outbound dial — eight diagrams covering each mechanism of a zero trust network, and what each one costs you.
How the three remote access architectures differ across attack surface, data path, access granularity and deployment, with the limits of each.
