Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Tough Times Create Tough People, Easy Times Create

Rising anxiety around decision making worries many leaders, as younger professionals fear choices that might come back to hurt their careers. The conversation argues that some struggle and hard calls build resilience, because security work often means choosing a path with partial data and then learning fast when reality hits. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..

How to Set Up Salesforce SSO for External Users Without Paying Per-User Licensing Costs

More than 150,000 businesses worldwide run on Salesforce, and for most of them, the CRM already holds the most complete and up-to-date picture of who their customers and partners are. That makes it a natural foundation for identity management, not just for internal employees but also for the external users who interact with your portals, applications, and partner platforms every day.

How to protect sensitive data: A practical guide for individuals

Protecting sensitive data is essential in today’s digital world, where personal information is stored across multiple devices and online accounts. From financial details to login credentials, even small pieces of data can be used by cybercriminals if they fall into the wrong hands. The good news is that you can protect sensitive data with simple, practical steps.

DoD IL4 and IL5 Authorization Guide - Requirements and Readiness

One of the core pillars of the security perspective adopted by the Department of Defense is the so-called Zero Trust strategy. This strategy is the adaptation to evolving threats in the world, many of which prey on the presumption of trust from accounts and individuals that can be compromised. To protect controlled unclassified information and other sensitive data, the presumption of zero trust is necessary to eliminate many common threats.

The Next Era of AppSec: Why AI-Generated Code Needs Offensive Dynamic Testing

My colleague Manoj Nair recently wrote about the growing gap between what AI builds and what security teams actually test. He made the case that the speed of AI-driven development has fundamentally outpaced validation, and that the response can't be to slow down, but to change what testing means. I agree with every word.

Digital Cleanup: It's Not Just Your Files, It's Your Brain

Digital Cleanup Day might be seen as a digital chore: delete old files, clear the inbox, reduce your carbon footprint. It’s framed as a technical exercise. But digital cleanup isn't only about your hard drive; it’s also about your mind. We are currently drowning in "Digital Toxicity" vast amounts of redundant, obsolete, and trivial data. This isn't just a storage issue. It’s a security crisis. Why? Because you cannot protect data you don’t remember you have.

Why NER models fail at PII detection in LLM workflows - 7 critical gaps

In AI systems, PII detection is the first step. Not the most glamorous step. But the one that, when it fails, takes everything else down with it. Identifying sensitive data (names, Social Security numbers, financial records, health information) has to happen before any of it reaches an LLM. Get this wrong, and you’re looking at one of two bad outcomes: Traditional DLP systems could afford to be aggressive with detection. LLMs can’t. They depend on full context to generate correct outputs.