The account that outlives the job
Most breaches we review start with a login that should not exist any more. Here is how to find yours in an afternoon.
By Priya Raman
Read the postSOC 2 Type II · ISO 27001 · 1,400 security teams
SOC 2 Type II · ISO 27001 · 1,400 security teams
Palisade
Palisade
Risk score82/100open
Next page/
Home
Blog
Notes from the sweep.
What we see in real environments, written by the people who find it.
SOC 2 Type II · ISO 27001 · 1,400 security teams
Blog
Notes from the sweep.
What we see in real environments, written by the people who find it.
SOC 2 Type II · ISO 27001 · 1,400 security teams
Blog
Notes from the sweep.
What we see in real environments, written by the people who find it.
SOC 2 Type II · ISO 27001 · 1,400 security teams
4 of 4 posts
Secrets · 24 September 2026 · 5 min read
What a leaked key costs, minute by minute
We published a test key to a public repository and timed what happened next. The first attempt to use it came in under a minute.
Network · 11 September 2026 · 4 min read
Why port 3389 is still open in 2026
Remote desktop on the public internet is the oldest finding in the book. It keeps coming back for one very human reason.
Compliance · 28 August 2026 · 7 min read
SOC 2 without the spreadsheet
Audit season does not have to be a project. Map each control to a live check once and let the evidence collect itself.
4 of 4 posts
LatestIdentity · 2 October 2026 · 6 min read
The account that outlives the job
Most breaches we review start with a login that should not exist any more. Here is how to find yours in an afternoon.
By Priya Raman
Read the postSecrets · 24 September 2026 · 5 min read
What a leaked key costs, minute by minute
We published a test key to a public repository and timed what happened next. The first attempt to use it came in under a minute.Network · 11 September 2026 · 4 min read
Why port 3389 is still open in 2026
Remote desktop on the public internet is the oldest finding in the book. It keeps coming back for one very human reason.Compliance · 28 August 2026 · 7 min read
SOC 2 without the spreadsheet
Audit season does not have to be a project. Map each control to a live check once and let the evidence collect itself.
4 of 4 posts
LatestIdentity · 2 October 2026 · 6 min read
The account that outlives the job
Most breaches we review start with a login that should not exist any more. Here is how to find yours in an afternoon.
By Priya Raman
Read the postSecrets · 24 September 2026 · 5 min read
What a leaked key costs, minute by minute
We published a test key to a public repository and timed what happened next. The first attempt to use it came in under a minute.Network · 11 September 2026 · 4 min read
Why port 3389 is still open in 2026
Remote desktop on the public internet is the oldest finding in the book. It keeps coming back for one very human reason.Compliance · 28 August 2026 · 7 min read
SOC 2 without the spreadsheet
Audit season does not have to be a project. Map each control to a live check once and let the evidence collect itself.
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected