Security advisories
Short, actionable notices when something relevant to you is being exploited: what it is, what is affected, what to do now, and what can wait.
Get supportHow to use this
Everything here is written to be useful without a sales call. Where a topic needs a conversation, the route to one is on the page.
What you will find here
Each area below is a defined part of the engagement, with an owner, an output and a date.
Severity
Severity rating with the reasoning behind it.
Affected systems
Products and versions known to be affected.
Summary
What the issue is, in three sentences.
Action
What to do now, and what can wait until the next change window.
References
Vendor advisories and authoritative sources.
Contact
How to reach us if you need help applying this.
How the work runs
The same sequence on every engagement, so you know what happens next.
Research
Written by the consultants doing the work, not by a content agency.
Review
Technically reviewed before publication.
Publish
Published with an author, a date and a review date.
Maintain
Reviewed at least quarterly, and withdrawn when it stops being accurate.
What you get out of it
Practical
Written to be useful without a sales call.
Current
Reviewed quarterly, with the review date shown.
Attributed
Named authors with relevant credentials.
Get advisories as they are published
No newsletter, no sales sequence, no address to hand over. Add the feed to your reader or your SOC's ingestion pipeline and advisories arrive when there is something worth acting on.
Feed URLs
RSS 2.0. Advisory titles are prefixed with severity, so a reader or SIEM can filter on it without opening the item.
Before you enquire
Is registration required?
How often is this updated?
Can we republish this content?
Where to go next
Get support
One scoping call with the consultant who would run the work. No obligation, no charge.