Skip to content
INSIGHTS

Notes on practical AI.

Short, opinionated pieces on where AI creates durable operational value, written for people who have to run the result.

WRITING

How Do I Secure Our CI/CD Pipelines and GitHub Actions?

Why pipelines are now a favourite target, a practical hardening checklist for GitHub Actions and other CI/CD systems, and where the tools still leave gaps.

APPSEC · RESEARCH
24 OCT 2026

How Do We Choose an Enterprise Architecture Tool in 2026?

What changed in the EA tools market in 2026, the 15 vendors Gartner evaluated, five questions to ask before you buy, and where AI agents fit.

EA · RESEARCH
23 OCT 2026

How Do We Reduce Our Application Security Backlog?

A practical plan for shrinking a security findings backlog: measure it properly, cut the noise, route to owners, fix in batches and stop it refilling.

APPSEC · RESEARCH
22 OCT 2026

How Do I Secure Vibe-Coded Apps Built by People Who Aren't Developers?

A practical process for finding, owning, scanning and fixing apps that people outside engineering have built with AI.

APPSEC · RESEARCH
21 OCT 2026

Do You Need More Than One Application Security Testing Tool?

Gartner's 2025 comparison of 16 AST vendors found none that covers the whole field. What each vendor is good at, the work that falls between the tools, and where AI agents fit.

APPSEC · RESEARCH
20 OCT 2026

Operational Intelligence vs Automation

A concise distinction between task automation and intelligence that improves operational decisions.

OPS INTELLIGENCE
18 JAN 2026

Designing Websites for AI Discoverability

How semantic structure, entity clarity, and metadata help websites become readable to AI systems.

DISCOVERABILITY
12 JAN 2026

What Most Businesses Actually Need From AI

A practical view of where AI creates durable operational value.

AI IMPLEMENTATION
08 JAN 2026
Call us