About us
Independent reporting on identity and access security, and what is confirmed.
What we cover
We cover identity providers, sign-in security and identity-based attacks as incidents and flaws are disclosed, checking each claim against advisories, vendor statements and filings, and labelling how strong the evidence is. We never publish steps that bypass authentication.
Our approach
Our approach is simple: report what the documents and credible sources actually say, label how strong the evidence is, and be honest about what we do not know. We are neither believers nor debunkers by default.
How we work
An automated research desk monitors official sources and news outlets around the clock, groups related reports, reads the underlying pages, and drafts original, fully cited reports. Every automated draft goes through a second fact-checking pass against its sources before it can publish. Details are on our editorial standards page.
Contact & corrections
Spotted an error, have a question or a tip? Contact us — corrections go straight to our editors’ queue and we review and correct promptly.