Our Opinion

What we think, from the work we actually do.

Perspectives from our practices and our research center — written from engagements, not from press releases — and tagged to the industries they concern.

Filter
Featured opinionFinancial ServicesTechnology, Media & TelecomEnergyHealth

Detection rules decay like software — treat them that way

SOCs measure alert volume and response time while their detection logic silently rots. Rule health — coverage, breakage, drift — is the metric that decides whether you see the intrusion at all.

Cybersecurity Practice · July 8, 2026 · 3 min read

Disagree with us?

The best engagements start as arguments. Tell us where we are wrong.