Featured1 min read
Why your MFA rollout probably has a gap
We have audited over 60 companies that believed MFA was fully enforced. Fewer than ten actually were.
Tomás ReyesHalden Security
Cybersecurity5 articles
Topic
Cybersecurity
Defending real organisations: email, identity, incident response and the boring controls that work.
Most read
Featured1 min read
Detecting phishing before it reaches your employees
Most phishing that gets through is not sophisticated. It is fast. A practical layered setup for a 50-person company.
Tomás ReyesHalden Security
CybersecurityResearch1 min read
The phishing simulation email that got the best (and worst) results
We ran the same simulation across 40 client companies. The results changed how we design every simulation since.
Tomás ReyesHalden Security
CybersecurityTutorial1 min read
What a tabletop incident response exercise actually looks like
A step-by-step walkthrough of the two-hour exercise we run with clients, including the scenario we use and where teams usually get stuck.
Tomás ReyesHalden Security
CybersecurityLatest
Guide1 min read
The five email security controls that stop 90% of incidents
Ranked by the incidents we have actually responded to, not by how they are usually marketed.
Tomás ReyesHalden Security
Cybersecurity