Insights
Clear thinking on AI, security and IT.
Practical guidance for leadership teams, written by the people who do the work.
Conosco is now an Assurix Trusted MSP. Here is what changes for our clients.Conosco is now an Assurix Trusted MSP - a live, independently verified UK standard. Here’s what it means and what changes for our clients.
What is ISO 42001 and does your organisation need it?ISO/IEC 42001 is the international standard for AI management systems. Find out what it covers, which organisations should consider certification, and how it connects to ISO 27001.Cyber Essentials Plus changes 2026: The Danzell UpdateCyber Essentials changed in April 2026. A clear guide to the Danzell question set, v3.3, the new auto-fail rules and what they mean for your certification.
What are the OWASP Top 10 vulnerabilities?The OWASP Top 10 lists the most critical risks to web applications. Here is what each risk means, why it matters to your business, and how to test for it.
Email misconfiguration: the silent risk hiding in your business inboxEmail misconfiguration leaves your domain open to spoofing and fraud. Learn what SPF, DKIM and DMARC gaps cost UK businesses and how to close them.
Prompt Injection - the attack that turns your AI against youPrompt injection is OWASP's #1 LLM vulnerability. Real CVEs, real incidents on Microsoft Copilot and Slack AI, and how to test and defend against it.
Annual penetration testing is no longer sufficient for board assuranceAnnual pen tests give boards a point-in-time snapshot, not ongoing assurance. Here is what adequate cyber governance actually requires in 2024 and beyond.
What a penetration test actually findsDiscover how penetration testing identifies vulnerabilities, validates risks, and provides actionable insights for enhancing your organization's security posture.
How often should you have a Penetration Test?Learn how often your organisation should conduct penetration testing and the importance of timely remediation to enhance security and mitigate risks.
What happens after a penetration test?After a penetration test, the report is only the starting point. Learn how findings are reviewed, prioritised, fixed, validated and turned into clear remediation evidence.
7 reasons your business needs a penetration testDiscover why your business needs a penetration test to validate security measures, prioritise risks, and enhance cyber resilience for better decision-making.
Pen testing with assurance: find it, fix it, prove itDiscover how effective penetration testing goes beyond reports to provide actionable insights, ensuring vulnerabilities are found, fixed, and proven resolved.
Start here.
Book a call with an expert, or get a quote for the service you already know you need.