Fluency Security

Sign in Subscribe

What Is AiTM, and Why It Matters

What Is AiTM, and Why It Matters

Adversary-in-the-middle (AiTM) phishing steals Microsoft 365 sessions after MFA succeeds and gives attackers free rein over the mailbox. Here is what a real AiTM attack looked like, and how Fluency now stops it in real time.

Beyond the AI SOC label

Beyond the AI SOC label

We compared ten AI SOC platforms. AI investigation is the shared promise. The real differences are in the data a platform keeps, the environment it understands, the reports it delivers and the actions it can take.

In the World of AI, Are you Valuable?

In the World of AI, Are you Valuable?

I recently met the owner of a good company that is likely

How AI Changed the SOC, Part 4: Analyst Rankings Are Not a Buying Signal

How AI Changed the SOC, Part 4: Analyst Rankings Are Not a Buying Signal

A registrant asks why anyone would buy from a startup when enterprises listen to Gartner. Chris Jordan on quadrants, QRadar and ArcSight, why small companies innovate and followers don't, and what data sovereignty means when you count the people.

Learning from South African Data Sovereignty

Learning from South African Data Sovereignty

South Africa's data sovereignty isn't only a government problem. The frameworks and products already exist; what's missing is the ability to operate them. Why every SA business leader should secure their own data first, and why waiting for the next breach is the wrong decision.

How AI Changed the SOC, Part 3: A Certificate Is Not a Fitness Test

How AI Changed the SOC, Part 3: A Certificate Is Not a Fitness Test

The concrete pillow: you can be fully compliant and still sell nobody what they wanted. Chris Jordan and Henry Denner on inherited compliance, what really drives SIEM cost, and the SOC report as an assurance paper.

How AI Changed the SOC, Part 2: AI Changed the Speed, Not the Technique

How AI Changed the SOC, Part 2: AI Changed the Speed, Not the Technique

Chris Jordan of Fluency Security and Henry Denner of ASI Connect on what mean time to detect should actually measure, why AI scales quality rather than cutting false positives, the move from agentic workflows to swarm, and the one response you never automate.

How AI Changed the SOC, Part 1: An Alert Machine Is Not a SIEM

How AI Changed the SOC, Part 1: An Alert Machine Is Not a SIEM

What does a SOC deliver for what it costs? Henry Denner of ASI Connect and Chris Jordan of Fluency Security on noise, clustering, cases, and why a SIEM that only produces alerts is an alert machine.

The LLM Proxy, and How to Put Your Agents Behind One

The LLM Proxy, and How to Put Your Agents Behind One

The exhibit floor at Black Hat this August had one theme, and

What makes an MCP Headless?

What makes an MCP Headless?

"Headless" is a programming term, and it's older

AI Did Not Change the Attack

AI Did Not Change the Attack

Loading the Elevenlabs Text to Speech AudioNative Player... “AI is compressing the

Kimi is Not K3

Kimi is Not K3

Articles comparing Kimi K3 with Claude Fable 5 often describe the result