Knowledge & context
What are you here for today? Pick the entry point that matches your situation.
Incident-response and industry-specific guides are currently only available in German.
Background, comparisons, context
Your security team should not be reading logs
Reviewing network data without adding headcount: why attention, not data volume, is the constraint — and which parts of the work belong to a machine.
Cyberattack — what to do now
The most important immediate steps in an IT emergency, the typical mistakes — and how to find out what is actually happening on your network.
Is my network compromised? 10 signs — and the invisible attacks
The most important signs of a compromise — and why the most dangerous attacks show no signs at all.
AI in cybersecurity: what autonomous attacks really change
AI makes attacks autonomous and fast — and renders two classic defense approaches obsolete. What replaces them, explained plainly.
More articles
Does "no alert" really mean "no incident"?
21% MITRE coverage on average, 79% blind spots — where the gap comes from, what it means in practice, and why it isn't a SIEM failure.
Pentest vs. vulnerability scan: what really tests your security?
Vulnerability scan, penetration test, or automated attack simulation? The three categories, their strengths and limits, and when each makes sense.
Not sure whether a closer look is worth it?
In 15 minutes you will know whether it makes sense for your situation — and what it would cost.
Talk to the teamNo preparation needed — bring your questions.