Writing

What we are seeing, written up as we go.

Notes from our own work, with any client details removed. Mostly about the unglamorous things that actually cause incidents in Australian small business estates: domains, email, endpoints and the systems nobody owns.

Identity · 27 Oct 2026

How passkeys work, and why you should use them

Sign in with a fingerprint, face or PIN, without typing a password. Learn how passkeys work, why they resist phishing, and how to avoid getting locked out.

6 min read
DNS · 10 Sept 2026

Most DNS change alerts are not incidents

A full run of DNS change alerts with nothing actionable in it. What the noise really is, why the obvious fix is dangerous, and how to spot the real change.

5 min read

Want this applied to your estate?

Most of what we write about is part of what we check for managed security clients.

Book a scoping call →