Cybersecurity
The Threat Floor: What Security Actually Costs a Small Business
Small-business security is not a procurement problem. It is a floor of six controls, and most breaches walk in through the gap where nobody funded them.
Index
Analysis
Field notes on security, AI, and the decisions behind them.
AI
Local AI Inference: A Decision Framework for 2026
Cloud inference is cheap at small volume and expensive at scale. The crossover, priced both ways, sits near 20,000 requests a day.
Cybersecurity
The First 72 Hours After a Breach
The first three days decide the bill and the recovery. Most of the damage I see in small-company incidents is self-inflicted: wiped machines, missing logs, late notice.
Leadership
The Security Leader a Small Company Actually Needs
A fifty-person company does not need a full-time CISO. It needs one named owner, a risk register somebody reads, and a quarterly report with four numbers in it.
Leadership
How VCs Read a Technical Company
Vision gets the meeting. Evidence gets the term sheet. The expensive mistakes in technical diligence are architectural and organizational, and they are visible in a week.
Cybersecurity
Five Security Trends That Should Change Your 2026 Budget
Trend lists are free. Budget lines are not. These five shifts change what a small company should buy this year, and one of them is a reduction in spend.
AI
AI Agents Are a Permission Problem
An agent that reads email and holds credentials is not a chatbot with more features. It is a new identity in your environment, and it needs the same controls.
Cybersecurity
What IBM’s Breach Report Gets Right — and What It Hides
The headline average is a marketing number, not a planning tool. Read the methodology, then build the model your own business can actually defend.
AI
AI Adoption Is a Workflow Problem
The pilots that fail are rarely the ones with the weakest model. They are the ones where nobody mapped the handoffs before automating them.
Cybersecurity
What the Iran Conflict Changes for a US Threat Model
State-aligned actors change the tempo and the target list. They do not change the fundamentals: exposed systems, weak identities, unpatched edge devices.