Articles
No articles match. Clear filters
framework
Mountain Maturity Communication Model
A mountain-climbing analogy that translates NIST CSF maturity levels into a five-stage narrative - Basecamp through Summit Standard - that boards and executives grasp without a framework briefing.
21 Sep, 2026
Open document : Mountain Maturity Communication Modelexperiment
All MCP Servers Failed the same Rule on My MCP Scanner!
An MCP scanner I'm building found no tool safety hints (read-only, destructive, open-world) on any of 16 public MCP servers. Without them, an agent client can't tell a read from a delete, so every call looks equally risky. What I found, what it doesn't prove, and what to check.
05 Jun, 2026
Open document : All MCP Servers Failed the same Rule on My MCP Scanner!experiment
I Scanned 16 MCP Servers for Safety Hints. The Scanner Flagged Every One.
On 2026-05-21 I scanned 16 public MCP servers for tool annotations, the hints agent clients use to decide when a human approves an action. The scanner flagged all 16, and one of those results is wrong. Here is what the gap means for approval gates, and what to check before you adopt a server.
20 May, 2026
Open document : I Scanned 16 MCP Servers for Safety Hints. The Scanner Flagged Every One.article
What AI Is Actually Doing in Your SOC - and What It Shouldn't Be Doing Yet
Only 9% of security practitioners are "very confident" in AI-generated alerts - yet adoption is accelerating. The gap comes down to a distinction the demos never make: AI at decision points in a workflow is not the same as AI replacing the workflow. Here is which use cases earn their keep.
27 Apr, 2026
Open document : What AI Is Actually Doing in Your SOC - and What It Shouldn't Be Doing Yetarticle
Your Data Lake Is Only as Useful as Its Ability to Answer a Question
You moved security data to a lake and cut costs. Then an investigation hit and your team spent two weeks finding what should have taken hours. The difference between a cheap archive and a queryable security asset comes down to three architecture decisions most organizations haven't made yet.
09 Apr, 2026
Open document : Your Data Lake Is Only as Useful as Its Ability to Answer a Questionarticle
The SIEM Cost Trap - Why Your Data Lake + AI Agents Will Win
The per-gigabyte SIEM pricing model punishes growth. A tiered architecture - hot data for detection, cold storage in a data lake, AI agents bridging the gap - breaks the cost trap without sacrificing security outcomes. Here's how to make the case to your leadership.
01 Apr, 2026
Open document : The SIEM Cost Trap - Why Your Data Lake + AI Agents Will Win