Knowledge & context
What are you here for today? Pick the entry point that matches your situation.
Incident-response and industry-specific guides are currently only available in German.
Background, comparisons, context
The most important reads first, more below.
Cyberattack — what to do now
The most important immediate steps in an IT emergency, the typical mistakes — and how to find out what is actually happening on your network.
Is my network compromised? 10 signs — and the invisible attacks
The most important signs of a compromise — and why the most dangerous attacks show no signs at all.
AI in cybersecurity: what autonomous attacks really change
AI makes attacks autonomous and fast — and renders two classic defense approaches obsolete. What replaces them, explained plainly.
More articles
Does "no alert" really mean "no incident"?
21% MITRE coverage on average, 79% blind spots — where the gap comes from, what it means in practice, and why it isn't a SIEM failure.
Pentest vs. vulnerability scan: what really tests your security?
Vulnerability scan, penetration test, or automated attack simulation? The three categories, their strengths and limits, and when each makes sense.
Not sure whether a closer look makes sense?
15 minutes to walk through your situation and tell you what a next step would cost — if one is needed at all.
Book an intro call15 minutes to get oriented. If it's not a fit, we'll say so.