tag / case-study

A POC pitted an agent-based compliance scanner against an active network scanner on the same Windows domain controller. They disagreed about whether it was vulnerable to BEAST. The disagreement is the whole story.

I built a small security lab to teach the failure modes I see most often in client work. The first real test was running it against my own production site.