About

We write about security, identity, and the systems that fail us daily.

After 50+ years combined in enterprise security, we've seen enough theater to fill Broadway. This blog chronicles what's actually broken, why it matters, and what we're building to fix it.

Topics range from cryptographic identity verification to why your bank still thinks SMS is secure. We share war stories. We dissect billion-dollar solutions that solve nothing.

Sometimes we rant. Sometimes we build. Always we tell the truth about an industry that profits from complexity