Blog
Notes from the field on virtual CISO work, vulnerability assessment, and the practical side of running a security program.
- 5 min read
Five Days of Validin, Day 5: Make it a routine you can actually keep
Turning four commands into a twenty-minute monthly routine that survives staff turnover — which is the only part that determines whether any of it mattered.
Read more → - 6 min read
Five Days of Validin, Day 4: "Is this real?"
A fast, defensible answer when a staff member forwards you a suspicious email — including why a blocklist hit is not a verdict, and what to do when nothing comes back.
Read more → - 7 min read
Five Days of Validin, Day 3: Can someone send email as you?
The DNS records that decide whether a stranger can send email as your executive director — including the SPF mistake I found sitting in my own domain.
Read more → - 7 min read
Five Days of Validin, Day 2: Everything with your name on it
Two commands that surface every subdomain and TLS certificate carrying your organization's name, including the ones nobody remembers creating.
Read more → - 9 min read
Five Days of Validin, Day 1: Where has your domain actually pointed?
One free command returns every address and nameserver observed for your domain going back years, with dates. Includes the ten-minute setup for a free account.
Read more →