All articles by Ashleigh Lee

Every mature vulnerability management program has a scoring model that isn't CVSS. It might say that anything on the CISA...

A security platform can tell you that a storage bucket is public, that a container image carries a critical CVE,...

What is the Orca Security plugin for ChatGPT and Codex? The Orca Security plugin for ChatGPT and Codex connects both...

Use Orca's pre-built Threat Investigator agent, or build your own with Orca's MCP Server feeding the context? It's a choice...

We believe modern security platforms need to enable security for the way your team actually works. In practice, that means...

Thirty years ago, software developers wrote code line by line, and a handful of them per company shipped anything to...

Anyone who can prompt Claude is now a builder. Engineers are writing code with it. Analysts are drafting research with...

Most Kubernetes security teams already have an admission controller: OPA/Gatekeeper, Kyverno, a custom webhook. Real work, producing real enforcement. But...

Key Takeaways Risk-based vulnerability management (RBVM) is a continuous program that ranks vulnerabilities by the real risk each one poses...