Access reviews
Spot excessive or stale permissions.
28 BUSINESS WORKFLOWS
Detecting, triaging, and reporting on threats. Explore the workflows below, then scope the right starting point with our team.
Search and filter these workflowsSpot excessive or stale permissions.
Judge whether something was machine-written, carefully.
Design sign-in and session handling that survives review.
Map controls to ISO 27001, SOC 2, or NIST and gather evidence.
Recommend secure baseline settings for systems.
Find exposed keys and weak credentials.
Use the primitive correctly, or do not use it.
Draft and tune SIEM queries and detection rules.
Check whether a document is what it claims to be.
The layer below the operating system, where patches are slow.
Write post-incident reports and stakeholder updates.
Guide responders through playbooks and build timelines.
Work out what a sample does before it does it again.
Segmentation, rules and what the traffic says is happening.
Probe a system the way an attacker would, with authorisation.
Classify reported emails and extract indicators.
Review content and behaviour against policy at volume.
Stop instructions arriving inside the data.
Find insecure patterns before code ships.
Answer the architecture and control questions teams bring.
Assess configurations and controls against frameworks.
Tailored training content and phishing simulations.
Draft and maintain security policies and standards.
Summarise and prioritise alerts with context.
Correlate signals and surface likely attacks.
Condense threat reports into actions for your environment.
Prioritise vulnerabilities by exploitability and exposure.
Help testers find and explain web app flaws.
Workflows are opportunities to configure and validate with your team. Available integrations, deployment and measures of success are agreed for your scope.
← Explore all business categories