Knowledge & context
What are you here for today? Pick the entry point that matches your situation.
Incident-response and industry-specific guides are currently only available in German.
Background, comparisons, context
The most important reads first, more below.
Your security team should not be reading logs
Reviewing network data without adding headcount: why attention, not data volume, is the constraint — and which parts of the work belong to a machine.
Cyberattack — what to do now
The most important immediate steps in an IT emergency, the typical mistakes — and how to find out what is actually happening on your network.
Is my network compromised? 10 signs — and the invisible attacks
The most important signs of a compromise — and why the most dangerous attacks show no signs at all.
AI in cybersecurity: what autonomous attacks really change
AI makes attacks autonomous and fast — and renders two classic defense approaches obsolete. What replaces them, explained plainly.
More articles
Does "no alert" really mean "no incident"?
21% MITRE coverage on average, 79% blind spots — where the gap comes from, what it means in practice, and why it isn't a SIEM failure.
Pentest vs. vulnerability scan: what really tests your security?
Vulnerability scan, penetration test, or automated attack simulation? The three categories, their strengths and limits, and when each makes sense.
Not sure whether a closer look makes sense?
15 minutes to walk through your situation and tell you what a next step would cost — if one is needed at all.
Book an intro call15 minutes to get oriented. If it's not a fit, we'll say so.