AI Security · Analysis
When AI agents gain access, skills become part of the attack surface.
How to frame permissions, approvals, and boundaries before agentic workflows move into production.
Cybersecurity risk · AI security · cloud security
The information is available.
The value is understanding what it means for you.
Practical cybersecurity analysis for leaders who need to turn changing threats, technology, and requirements into defensible action.
Explore intelligenceClear context.
Better decisions.
Cybersecurity news is abundant. Useful context is not. This site connects real-world events, security practices, and emerging technology to the questions organizations actually need to answer: what happened, why it matters, where the exposure may be, and what to consider next.
Cybersecurity Intelligence
Signals worth acting on.
Incident analysis and practitioner-oriented perspective—not a news feed.
Read analysis →
Identity · Risk translation
Why local accounts continue to create outsized risk.
Technical debt meets identity governance: the control gaps that often stay hidden until an incident.
Cloud Security · Practice
What good AWS security looks like before an audit begins.
Security foundations that make cloud risk visible, governable, and easier to improve.
Core perspectives
Security, connected.
Start from the area that matches the decision in front of you.
01
Cybersecurity Intelligence
Events and developments, translated into organizational relevance.
02
AI Security
Governance, risk, and safeguards for AI systems and agentic work.
03
Cloud Security
Practical cloud security foundations, with a focus on AWS.
04
Frameworks & Regulations
What leading frameworks require—and how they inform action.
05
Technology & Vendors
Where security technologies fit, the risks they address, and the tradeoffs.
06
About Matt
A risk-centered perspective built around practical, business-aware security.
Frameworks & regulations
Translate requirements into a program.
Technology & vendors
Technology in context.
Clear, independent explanations of where platforms fit in a layered security program.
Identity
CyberArk & SailPoint
Privileged access and identity governance: different control problems that must work together.
Cloud
Wiz & AWS Security
Understanding cloud posture, workload exposure, and ownership across a shared-responsibility model.
Detection
CrowdStrike & Splunk
Endpoint and security operations capabilities that turn telemetry into response.
MC
About Matt
Security should make the business more resilient—not simply more controlled.
I work across cybersecurity risk, governance, technologies, and operating practices. My focus is helping leaders make sense of a complex security environment and connect it to clear, proportionate action.
The perspectives on this site distinguish between established research, leading practice, and personal experience—because credibility depends on being clear about the source of a point of view.
Connect with Matt