Expert cybersecurity analysis, breach post-mortems, and compliance guides from our CREST & QSA certified consultants.
Compliance, customers, and the box-ticking problem! Almost every penetration testing enquiry opens the same way. Someone needs a pen test. The useful question is the one after that, and we ask it early in scoping: why now? Three answers cover nearly all of it.…
Read the full article
RedSecLabs achieves UKAS-accredited ISO/IEC 27001:2022 and ISO 9001:2015 certification The London cybersecurity consultancy that has guided dozens of organisations…
PCI SSC has revised FAQ 1331 again. The latest wording makes the compliance-accepting entity an explicit part of any decision to use…
AI-assisted development speeds up software delivery but can amplify common security weaknesses. This article explores five vulnerabilities frequently identified during penetration testing and practical ways to reduce the risk.
A few weeks ago, we published our analysis, “Claude Mythos: Breakthrough or Brilliant Marketing?”, where we examined the growing discussion around Anthropic’…
Every few years, cybersecurity encounters a technology that forces the industry to pause and reassess its assumptions. Cloud computing did it. EDR…
SOC 2
AICPA SOC 2 compliance plays a key role in building trust with customers, partners, and enterprise buyers. If your company has a…
SOC 2
At RedSecLabs, we get asked the same question at the start of almost every client engagement: "What is this going to…
SOC 2
SOC 2 stands for “System and Organization Controls 2”, which is a compliance framework used to evaluate how well an organization protects…
Penetration testing, compliance assurance, and red team engagements scoped the same business day by our CREST & PCI QSA accredited team.
