Security research briefings · Dallas–Fort Worth, Texas
Security Research & Briefings
A written briefing that tells your leadership what changed in the threat and AI-risk picture this quarter, what it means for your systems, and which decisions it forces. Produced as client work, not marketing.
What a briefing contains
Written, not presented from slides. Short enough for a board pack, specific enough that the technical team can act on it.
The threat picture for your business
What changed this quarter in the threats aimed at your vertical and your size of company, filtered so it is relevant to the systems you actually run. Sourced and dated.
AI-risk developments
New model and vendor risks, prompt-injection and data-leak patterns, and changes in AI terms or regulation that touch the tools your staff already use.
Exposure findings
What an OSINT review found about your public footprint, and what a customer or attacker could see from outside without logging in.
Three decisions, with owners
Each briefing ends with the small number of decisions it forces, who owns each one, and the date it is due. Otherwise it is just reading.
Tabletop exercises
A tabletop is how a leadership team finds out what it would actually do in an incident, without the incident. We build the scenario around your systems, facilitate the session, and write the after-action report.
- A scenario drawn from your vertical, your vendors, and your AI use.
- The people who would actually be in the room: operations, finance, IT, legal, and leadership.
- Facilitation that tests decisions instead of rehearsing the answer.
- An after-action report: what worked, what was missing, and who fixes it by when.
A written record of the decisions
The value is not the exercise; it is the record. The after-action report names the decisions the team made under pressure, the information they did not have, and the contacts that turned out to be wrong.
That record becomes the basis for the next revision of the incident response plan, and the evidence that the plan has been tested.
OSINT exposure reviews
What can someone see about your company from outside, without credentials? The answer is usually more than the team expects.
Public services
Internet-facing systems, remote-access gateways, and forgotten subdomains or staging environments that still resolve.
Credentials in public sources
Accounts and keys that appear in public breach data or public code. We tell you what is exposed and which ones still need rotation.
Vendor and staff footprint
The suppliers, tools, and AI vendors your company publicly reveals, plus oversharing by staff and the paths it opens.
Public sources only. No published research claim.
An OSINT review uses public sources only. We do not attempt unauthorised access and we do not test systems. This service is written analysis produced for a client; it is not a research publication, a research team, or a peer-reviewed program, and we do not describe it as one.
What you get
- A written briefing, two to four pages, sourced and dated.
- An exposure list ranked by what is actually reachable or usable.
- A tabletop scenario and after-action report, when that is in scope.
- A short decision list with owners and dates for leadership.
- The source pack, so the next briefing does not start from zero.
Start with the diagnostic
Briefings frequently follow the Security & AI Risk Diagnostic, because the findings give the briefing something specific to be about. 15 business days.
For a standing briefing cadence, the Fractional CISO retainer is $9,500 a month for two days a week, 90-day term. Never a free audit.
Briefings and research questions
Is this published research?
No. Briefings are written for the client who commissioned them. We do not claim a research publication record, a research team, or peer-reviewed output. The work is analysis produced as client work, not marketing.
What happens in a tabletop exercise?
Your team works through a realistic scenario together: an incident, a vendor compromise, or a ransomware demand. We facilitate, keep the decisions honest, and write the after-action report with the gaps and the fixes.
What is an OSINT exposure review?
A review of what is publicly visible about your company: exposed services, credentials in public sources, vendor and subdomain exposure, and oversharing by staff. It uses public sources only. We do not attempt unauthorised access.
How often do briefings run?
Cadence is agreed in scope: a single briefing before a board meeting, a quarterly cycle, or a standing item inside the fractional CISO retainer.
Give the board something specific.
A written briefing, an exposure review, or a tabletop before the incident. Tell us the meeting it is for and who will be in the room.