Insights & stories.
The Human Risk blog examines the methods, risks and defence strategies of social engineering: compact, practical and human-centred.
Red teaming: realistic security testing through simulated attacks
Red teaming has established itself as a practice-oriented method for testing the effectiveness of security measures under realistic conditions.
Security assessment: a well-founded approach to modern security evaluation
Security assessments are indispensable tools for protecting IT infrastructure, business processes and sensitive data against attacks.
Incident response: a practical review of corporate cyber defence
In a digitalised economy, cyberattacks and security incidents are among the greatest risks for organisations of all sectors and sizes.
The latest scams of 2025
The threat from fraud and cybercrime keeps evolving. In 2025 several new, in some cases technologically highly advanced, types of fraud are emerging.
Social engineering: the underestimated threat in cybersecurity
Social engineering is one of the most serious threats in cybersecurity. It does not involve technical attacks, but targeted manipulation aimed at the human factor.
Social engineering case study: “Manipulation always works”
This pentest was one of the first SE pentests we carried out as a larger team. The attack simulation very nearly failed.
Turning human risk into human resilience
A 50-week vishing awareness campaign shows how human risk can be turned into measurable resilience.
Ready to put your security to the test?
A first conversation: no obligation, confidential, and as equals. Together we work out where your biggest risks lie.