Insights
Security analysis and technical guides.
Practical writing on AI security, application security testing, and the technical realities of cybersecurity in regulated environments.
AI Security
What Microsoft 365 Copilot Can Expose Without Bypassing Permissions
Permission sprawl, overshared SharePoint sites, stale groups, connector scope, and sensitive metadata made discoverable by AI.
Read Article
AI Security
Evidence-First AI Security Evaluation
How SCS structures AI security testing across LLM apps, RAG systems, agents, internal copilots, and Microsoft 365 Copilot exposure.
Read Methodology
Network Defense
Blocking Port Scans on pfSense
Configuration guide for using pfSense to detect and block port scanning activity — hardening your network perimeter against reconnaissance.
Read Article