ResearchResearch & IPOngoing2026
The dangers of security theatre
Security programs are usually described by what they have: purchased tools, signed policies, closed findings, and certificates. That says almost nothing about what would happen if a capable attacker tried something today. This pillar tests the controls and measures what happens.
The full record
This work keeps its detail in the Research & IP register, so there is one copy of the facts rather than two.