Scope
Scope and affected area
Relevant product families, operating conditions, and the limits of the assessment.
Zero‑day intelligence platform
We investigate why an issue occurs, check the evidence, and assess detection and protection options.
How it works
We define the question first, then check the findings before considering detection and protection options.
Research focus
Identify the product family, the research question, and the systems covered by the work.
Evidence review
Check the cause and potential impact against the available evidence. Record assumptions and unresolved questions.
Defensive analysis
Consider what to monitor, which telemetry would be needed, and where temporary protections may fall short.
Delivery
Confirm coverage, format, timing, access, and confidentiality in writing before research is shared.
Research record
These are the main areas covered in a research record. The exact contents depend on the agreed scope.
Scope
Relevant product families, operating conditions, and the limits of the assessment.
Analysis
What the analysis establishes, the evidence behind it, and any open questions.
Action
Behavior to monitor, required telemetry, and interim controls with their limitations.
Lifecycle
Vendor guidance, patch status, and reasons to revisit the assessment.
Review the record when the evidence or patch status changes.
We confirm what is covered, how it will be delivered, and who may access it.