Tag
#security
16 articles
EASM as a Closed Loop: Discovery, Rating, Remediation, Repeat
External Attack Surface Management only works as a closed loop. How Prismatic Perimeter discovers assets, rates them, feeds the decision engine, and shortens time-to-remediation from weeks to hours.
Color Team Operations: Red, Blue, Purple, and Why You Need All Three
Red finds the holes. Blue closes them. Purple makes sure they stay closed. A security program with only one color is a security program with a blind spot — and attackers find blind spots for a living.
Implementing a Compliance-Grade Audit Trail in Elixir
Building an audit logging system with action tracking, IP logging, duration measurement, query patterns, and GDPR-compliant retention for regulatory compliance.
CER/NIS2 Compliance: Automating Czech Critical Entity Requirements
How Prismatic automates NIS2 and Czech ZKB compliance for critical entities: supplier vetting, employee screening, incident reporting, and evidence-based gap analysis.
EASM: Automating External Attack Surface Discovery
How Prismatic Perimeter discovers and monitors an organization's internet-facing assets using DNS enumeration, certificate transparency, port scanning, and continuous monitoring.
Pre-Commit Security Gates: 9 Blocking Pillars for Code Quality
Implementing pre-commit hooks that enforce 9 blocking security and quality pillars: grep scanning for String.to_atom, hardcoded secrets, AST analysis mix tasks, and pillar-based enforcement architecture.
Zero Trust in Elixir: The SEAL Security Doctrine
Implementing the SEAL security doctrine in Elixir: parameterized Ecto queries, environment variable secrets management, Code.eval prevention, input validation boundaries, and OWASP Top 10 mapping.
Shodan Integration Guide: Building an OSINT Adapter in Elixir
Step-by-step guide to integrating Shodan's internet device search engine into an Elixir-based OSINT platform, covering API setup, banner parsing, service fingerprinting, CVE correlation, and rate limiting.
EA × Security: Attribution — Beyond Technical Indicators
Cyber attribution je narrative construction — EA odhaluje atribuční bias
EA × Security: AI-Augmented Spear Phishing
LLM-crafted spear phishing — EA framework jako last line of defense
EA × Security: Incident Response — Narrative Discipline
IR komunikace je narrative warfare — kontrola příběhu = kontrola damage
EA × Security: Social Engineering 2.0 — EA Detection
Sophisticated social engineering attacks vyžadují EA-augmented detection
EA × Security: Supply Chain Narrative Attacks
Supply chain attacks zahrnují narrative manipulation — ne just code injection
EA × Security: Enterprise Disinformation Defense
Disinformation jako security threat — corporate brand poisoning
EA × Security: Threat Intel Source Validation
Threat intelligence je často OSINT in disguise — EA aplikuje source-credibility framework
EA × Security: Insider Threat — Behavioral EA
Insider threats vyžadují behavioral baseline a anomaly detection — ne just access logs