IDENTITY GOVERNANCE
Beyond the passkey rollout: who controls your authentication keys?
Passkeys reduce phishing exposure, but syncing, recovery and key ownership still need explicit decisions.
Read articleINSIGHTS
Security updates.
Practical next steps.
Original research notes for teams making identity, monitoring and incident-response decisions.
Published . We distinguish new source updates from established guidance; these are not live threat alerts.
IDENTITY THREAT DETECTION
A genuine sign-in page can still authorise an attacker
Device-code phishing can abuse a legitimate sign-in page. Connect prevention, monitoring and containment.
Read articleINCIDENT READINESS
Can your logs answer the first questions after a breach?
Test whether your telemetry supports a defensible investigation—not simply whether logs are being collected.
Read articleStart with your environment
Where does access
need attention?
Tell us which systems you use, what is getting in the way and what you need to change. We can discuss a suitable scope.
[email protected]Cape Town, South Africa