Twenty years of
measuring what could go wrong
Threat intelligence, vulnerability management, and the risk quantification that came out of both. The record, the résumé, and the frameworks that are still in use.
Tool
Quantitative risk calculator
Version 7.2 of a five-layer cybersecurity risk architecture, with dual-track scoring. Run it in the browser.
Open → Paper · PDFThe risk scoring whitepaper
The method behind the calculator, written out in full.
Open → The recordArticles, interviews and threat research
Published research and media placements across two decades of security work — and where the research has been cited since.
Open → RésuméProfessional history
Roles, scope and what each one actually involved.
Open →