Writing

From the team.

Notes on AppSec partnerships, fuzzing in regulated industries, supply-chain security, and channel economics. No marketing fluff.

• How Supply Chain Security Tools Generate SBOM Evidence for SOC 2 Audits
  2026-09-21
• The MSP Economics of EASM: When It Scales With Your Book, When It Does Not
  2026-09-04
• Agentless Security for SMBs: What You Can - and Cannot - See Without Endpoint Agents
  2026-09-02
• NIST SP 1326 Supply Chain Tiers: How Deep Does Your Dependency Map Need to Go?
  2026-07-13
• NIST SP 1326 Foundational Cyber Practices: What Secure SDLC Evidence Actually Looks Like
  2026-07-13
• FOCI in NIST SP 1326: What It Means and What Buyers Will Ask Your Supplier
  2026-07-13
• NIST SP 1326 and Component Provenance: Source, Binary, and the Gap Between Them
  2026-07-13
• NIST SP 1326 Is Out: What ICT Suppliers Need to Do Now About Software Supply Chain Due Diligence
  2026-07-13
• A CVE in Your Vendor's Binary Is Not Proof of a Real Risk - Here's How to Tell the Difference
  2026-07-05
• Pentest on Every Deploy: Why Continuous Penetration Testing Belongs in Your CI/CD Pipeline
  2026-07-05
• Binary SCA vs Source-Code SCA: Why Closed-Source Software Has a Supply-Chain Blind Spot
  2026-07-05
• How to Generate a Firmware SBOM When You Have No Source Code
  2026-07-05
• How to Security Test LLM and AI-Powered Applications
  2026-07-05
• Agentic AI Pentesting vs DAST Scanners: Why Chained Exploits Change Application Security
  2026-07-05
• Subdomain Takeover: The Quiet Risk Hiding in Your Wix, Shopify, or GitHub Setup
  2026-07-02
• Why Apona Builds Channel-Heavy: The 80/20 Decision and What It Means for Partners
  2026-06-25
• The Dual-Product Channel: How Labrador and Penzzer Fit Together for a Security VAR
  2026-06-25
• The MSSP Economics of Managed SAST: When It's Profitable, When It's Not
  2026-06-24
• What an AppSec Consultancy Actually Wants From a Fuzzer Vendor
  2026-06-24
• Modern SAST Is About Precision, Not Coverage - What That Means for Your Practice
  2026-06-23
• How to Read an SBOM That a Regulator Will Actually Accept
  2026-06-23
• What We Look For in a US AppSec Channel Partner
  2026-06-16