Research
Our research teams investigate emerging threats, secure software, digital identity, and the societal impact of connected systems—so defenders can act on evidence, not fear.
Threat Research
Tracks adversaries, campaigns, exposure patterns, and the defensive signals organizations can use.
AI Security
Studies agent safety, model misuse, prompt attacks, and reliable controls for AI-enabled systems.
Privacy & Identity
Examines identity abuse, data exposure, verification, and privacy-preserving security systems.
Malware Analysis
Analyzes malicious files, infrastructure, and behavior to improve detection and response.
Vulnerability Research
Finds software weaknesses and develops practical, responsibly disclosed remediation guidance.
Human Solving Services and the Limits of Asking "Are You Human?"
A captcha solved by a paid human is solved by a human. The defence cannot be a harder puzzle, because the puzzle is not what failed. What actually separates a genuine visitor from a relayed one is continuity and cost.
What a Router Traffic Counter Actually Measures
A gateway counter is a total, not a rate. It resets without warning, and on a fast connection a 32-bit one can wrap in under a minute. Every honest traffic graph is built on top of those three facts, and the graphs that ignore them fail in the same three ways.
Threat Research · Aug 22, 2026An IP Flag Is Not a Fact
Every IP intelligence product answers "is this a VPN?" with true or false. The honest answer has a second half — how well-evidenced that is — and dropping it moves the risk onto whoever is blocking real users.
Threat Research · Aug 22, 2026Why Residential Proxies Defeat the Standard Playbook
Every reliable technique for spotting anonymised traffic works by recognising infrastructure. A residential proxy is not infrastructure — it is a real home connection with a second job, which is why the usual signals have nothing to catch.
Threat Research · Aug 15, 2026The Controls Cyber Insurers Ask About
Underwriting questionnaires have converged on a short list of technical controls. Knowing what they are — and why each one is asked — is worth more than the answers.
Publications
| Date | Research team | Title |
|---|---|---|
| Aug 27, 2026 | Threat Research | What a Router Traffic Counter Actually Measures |
| Aug 25, 2026 | Threat Research | Human Solving Services and the Limits of Asking "Are You Human?" |
| Aug 22, 2026 | Threat Research | An IP Flag Is Not a Fact |
| Aug 22, 2026 | Threat Research | Why Residential Proxies Defeat the Standard Playbook |
| Aug 15, 2026 | Threat Research | The Controls Cyber Insurers Ask About |
| Aug 2, 2026 | Threat Research | Defending the Origin: Mitigating CDN Bypass and Multi-Vector Attacks |