Tag: SaaS
-
Threat Hunting Without Budget in 2026
Threat hunting without a budget sounds like the impossible assignment, and it usually is. The teams that pull it off are not the ones that found a way to buy more tooling. They are the ones that figured out how to use what they already had, more carefully, with more discipline, with the hypothesis driven…
-
Third Party Risk Management in 2026: The Honest Guide
Third party risk management in 2026 amounts to a $15B annual market, with the typical enterprise running 500-2000 third party relationships, with the third party risk program trying to assess the security of each one. The honest guide covers what works, what does not work, and what to actually do.
-
A Field Guide to the DevSecOps Pipeline
A field guide to the DevSecOps pipeline in 2026, with the gates that actually catch the real bugs, the gates that are pure theatre, and the order that the gates should fire in without slowing the team down.
-
What Replaces the VPN in 2026
A field guide to what replaces the VPN in 2026, with the four approaches the enterprise is taking, the tradeoffs the enterprise is making, and the part about the right answer for the specific workload.
-
State of the AI Stack: Q2 2026
The AI stack in Q2 2026 amounts to a stack that has settled into its shape, with the foundation models, the orchestration frameworks, the vector databases, the agent frameworks, the evaluation tools, the deployment platforms, the observability tools. The state of the AI stack in Q2 2026 amounts to a state where the buyers know…
-
Tools the Engineering Team Should Pay For
The engineering team has a budget. The free tools cover most of the work. A handful of paid tools are worth the spend. Here is what is worth it in 2026.
-
Multi-Cloud Is Not the Answer (But You Will Do It Anyway)
Multi-cloud sits as the strategy the consulting firm sold the board in 2019 and the operations team has been trying to make work since. The pitch was vendor lock in avoidance, the cost optimisation, the resilience. The reality sits as the second cloud account nobody can fully account for, the second identity system nobody wants…
-
Why the Supply Chain Attack Keeps Winning
The supply chain attack keeps winning because defenders optimise for the wrong layer. Here is what actually works, in 2026, against the upstream dependency, the build pipeline, and the signed vendor update.
-
Why Privacy Banners Don’t Work and What Does
Cookie consent banners have been on roughly 90 percent of EU sites for years. They have changed almost nothing. Here is why they fail, and what privacy UX that actually works looks like in 2026.
-
A Field Guide to Secure Defaults in 2026
Most breaches in 2026 exploit a default that was wrong at install. The defender who fixes the defaults fixes the breach. Here is the field guide.