QUESTION
What do we know about communication across our network?
Related article
Your security team should not be reading logs
Read articleKNOWLEDGE & PRACTICE
Ask the right questions.
Assess security with greater clarity.
What can be seen across a network? How do security controls complement one another? And which questions matter in your environment? Our articles and guides provide context.
START HERE
These questions can help you begin.
Three starting points lead to network context, the role of existing controls, and a comparison of security testing approaches.
QUESTION
How do our security controls complement one another?
Related article
Does ‘no alert’ really mean ‘no incident’?
Read articleQUESTION
What do different security tests examine?
Related article
Pentest vs. vulnerability scan: what really tests your security?
Read articleUNDERSTAND NETWORKS
What is happening across our network?
Sometimes the missing piece is simply an overview. These articles help assess network communication, observations, and the limits of available information.
Your security team should not be reading logs
How network data can be reviewed without tying up the security team's attention with raw data.
Read articleAI in cybersecurity: what autonomous attacks really change
How AI changes attacks and defense, and which conclusions security leaders can draw from that change.
Read articleASSESS SECURITY CONTROLS
Which question does each approach answer?
Different methods provide different findings. These articles offer context for evaluating security controls and testing approaches.
Does ‘no alert’ really mean ‘no incident’?
Where rule-based detection has limits and why different security perspectives complement one another.
Read articlePentest vs. vulnerability scan: what really tests your security?
Which questions vulnerability scans, penetration tests, and automated attack simulations each answer.
Read articleSECURITY INCIDENTS
When a specific incident may be involved.
These articles explain questions and first steps when a security incident is suspected or confirmed.
Cyberattack — what to do now
The first organizational and technical steps that matter during an IT security incident.
Read articleIs my network compromised? 10 signs — and the invisible attacks
Which observations may indicate a compromise and where the limits of those signals lie.
Read articleDuring an active incident, contact your incident response team or emergency service provider immediately.
GLOSSARY
Is a term still unclear?
Our glossary explains terms related to network monitoring, threat detection, and security testing.
Look up a termCONTACT
Which question remains open in your environment?
You do not need a concrete suspicion or a finished requirements document. Tell us what you want to understand more clearly.
Discuss your situation