Research & development

From evidence
to practice.

Our R&D starts with a simple question: what genuinely improves an organisation’s security, at a cost and complexity it can sustain?

Observe

Start with the real decisions, constraints and behaviours of organisations.

Connect the latest academic work to the problems we observe.

Build quickly, test assumptions in the field and measure outcomes.

Turn strong evidence into simple, accessible and durable tools.

Principles

Every model must expose its limits, sources and level of uncertainty.

We evaluate the effect produced, not content consumed or boxes checked.

Rigour should not reserve good security for large organisations.

Collaborate