Resources · Security research
Security research from Neonix.
Plain-language research notes on external threats, exposure, application security and identity security.
Threat intelligence
What threat intelligence is, the four levels teams use it at, and how to make it change decisions instead of filling a feed.
Read noteDark web
What dark web monitoring can and cannot tell you, and the workflow that turns a finding into a fixed problem.
Read noteRansomware
How ransomware intrusions usually unfold, and where a defender can break the chain.
Read noteCVE research
Why a severity score is not a priority, and how to decide which vulnerabilities to fix first.
Read noteAttack surface
What an external attack surface includes, the exposures that recur, and why discovery has to be continuous.
Read noteIdentity threats
How attackers target identities, and the controls that limit what a stolen identity can do.
Read noteApplication security
The recurring ways web applications are attacked, and the layers that reduce the risk.
Read noteAPI security
Why APIs need their own security thinking, and the practical controls that matter most.
Read note