Resources
Everything Threatless publishes, in one place.
The Threatless library: original research from the Labs, technical writeups from the field, and plain-language guides. Each one is written from the work we do and built to stand on its own, useful whether or not you ever work with Threatless.
Publications
Research, writeups and writing
- Technical publicationThreatless Security ReviewCurated vulnerability research, bug bounty discoveries, CTF and exploit writeups, each reviewed against a published standard and credited to its author.Open
- Threatless LabsResearchOriginal formal research, published only when it can be proven, with its method, limitations and disclosure stated plainly.Open
- WritingBlogPractical security writing from the team: exposure management, attack surfaces, security testing, and notes from building an AI-native platform.Open
- UpdatesNewsWhat Threatless shipped, and brief sourced notes on the developments that matter to the people we work with.Open
Guides
For organizations
- Exposure management / 8 min readWhat continuous threat exposure management is, and how to start a programA plain-language guide to continuous threat exposure management: the five-stage cycle, how it differs from vulnerability management and how to start without buying anything.Read the guide
- Attack surface management / 8 min readYour external attack surface: what an outside view can and cannot tell youWhat makes up an external attack surface, why assets go missing from inventories, why exposure is not the same as vulnerability and how to build a reliable outside-in view.Read the guide
- Security testing / 7 min readPenetration testing or vulnerability assessment? Choosing the right engagementHow penetration testing and vulnerability assessment differ in purpose, depth and output, when to use each, and how to scope either one well.Read the guide
More from Threatless
Start here
Go from reading to certainty.
Our writing explains the practice. When you want it applied to your own environment, tell us what is at stake and we will propose where to start.