Cybersecurity · Article
Security teams need to prepare for agentic attack paths
AI-enabled attackers can compress reconnaissance and exploit development, making basic control gaps and slow remediation more costly.
SEC technology
Cybersecurity
Identity, risk, security operations, resilience and governance. Practical guidance for evaluation, implementation, governance and day-to-day operation.
Editorially prioritisedSource-awareBuilt for decisions
Browse by horizontal
Browse by format
Current priority
Security teams need to prepare for agentic attack paths
AI-enabled attackers can compress reconnaissance and exploit development, making basic control gaps and slow remediation more costly.
Read the lead insightCCurated for Cybersecurity
ARTArticlesA focused answer to one practical technology question.WPWhitepapersA clear framework for a complex cross-functional decision.RPTInsight ReportsA disciplined view of the signals leaders should monitor.BUYBuyer GuidesA practical path from requirements to a defensible shortlist.CASECase StudiesAn illustrative scenario, not a fabricated customer claim.WEBWebinar BriefingsA ready-to-use briefing for a useful executive discussion.KITChecklists & TemplatesA practical tool that can move directly into a working session.BENMaturity BenchmarksA transparent maturity model without invented traffic or performance data.
Current priorities
Cybersecurity intelligence.
Cybersecurity · Buyer guide
How to evaluate security controls for enterprise AI agents
Agent security products should be tested against identity, tool access, prompt injection, data leakage, unsafe actions and monitoring gaps.
Cybersecurity · Whitepaper
An identity-first security model for the agentic enterprise
Agents need identities, permissions and lifecycle controls that are distinct from both human users and traditional service accounts.
Cybersecurity · Insight report
The security signals behind shadow AI risk
Shadow AI is no longer only unsanctioned chat use. It includes hidden agents, embedded model features and tools acting through approved applications.
Cybersecurity · Toolkit
AI agent threat-model checklist
A compact threat-model checklist for agents that read enterprise data, call tools or change records.
Cybersecurity · Maturity benchmark
Agent security maturity: visibility to continuous assurance
A qualitative maturity model for agent discovery, testing, authorization, monitoring and incident response.
Cybersecurity · Buyer guide
Identity security buyer guide: requirements, demos and trade-offs
Decisions about identity security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Insight report
Identity security signal report: what leaders should monitor
Decisions about identity security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Whitepaper
Whitepaper: an operating model for identity security
Decisions about identity security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Article
A better starting point for application security
Decisions about application security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Article
A calmer way to evaluate vulnerability management
Decisions about vulnerability management improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Maturity benchmark
A four-stage maturity model for zero trust programmes
Decisions about zero trust programmes improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Article
A practical review of third-party cyber risk for Cybersecurity leaders
Decisions about third-party cyber risk improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Buyer guide
A practical selection process for third-party cyber risk
Decisions about third-party cyber risk improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Webinar briefing
Application security briefing session: a practical ninety-day agenda
Decisions about application security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Maturity benchmark
Application security continuous-improvement benchmark
Decisions about application security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Toolkit
Application security ninety-day action planner
Decisions about application security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Buyer guide
Application security renewal guide: reassess value before extending
Decisions about application security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Insight report
Application security review report: questions for the next operating cycle
Decisions about application security improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Insight report
Attack surface management implementation report: practical signals from the work
Decisions about attack surface management improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Buyer guide
Attack surface management procurement guide: decisions before pricing
Decisions about attack surface management improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Toolkit
Attack surface management quarterly health-check template
Decisions about attack surface management improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Maturity benchmark
Attack surface management service maturity benchmark
Decisions about attack surface management improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.
Cybersecurity · Webinar briefing
Attack surface management webinar questions for technology and business teams
Decisions about attack surface management improve when cybersecurity leaders define the work, ownership, evidence and exceptions before selecting or expanding technology.