Research programs, not a blog
We separate what we know, what we believe, and what we are testing. Failed experiments are useful, and we treat them as part of the record.
Active programs
- Autonomous Endpoint Defense
- Agentic SOC — security operations that use bounded agents under human authority
- Agent Security — securing the agents themselves
- Autonomous Security Engineering
- AI-Enabled Detection Engineering
- Security Control Validation
- Human–Machine Security Operations
We use AI and agents not to remove accountability from cybersecurity, but to increase the speed, scale, precision, and resilience with which defenders can observe, reason, respond, and recover.
Related lab output includes Endpoint Truthfinder, a free open tool for directory-to-sensor presence checks. Seeing a host listed is not the same as knowing it is ready.